Re: Platform Attestation. was:To SSL-client-auth or not to SSL-client-auth, that is the question(?)

Hi Julien, My posting MAY be considered as a "speculation" since this has not happened yet. The reason why this *could* become a reality is the success of web-based services including outsourced dittos. The latter seriously limits the applicability of VPN connections and platform attestation at t

Re: Platform Attestation. was:To SSL-client-auth or not to SSL-client-auth, that is the question(?)

Anders, Anders Rundgren wrote: Another reason why SSL client authentication may go bust is that it does not support the inclusion of platform attestations, something that may be required when TPMs become standard. That is, you may [in the future] not be able to access corporate web-mail (or o

Re: Verify signText() on server

Ian Coates wrote: > I used crypto.signtext() method on FireFox 1.5 to sign a Text, now I want to > verify that signature on a Java server. > I looked the documentation but I don't understand how to verify the > signature without the signer certificate. I suppose the certificate comes in > the sig

Verify signText() on server

Hi, I used crypto.signtext() method on FireFox 1.5 to sign a Text, now I want to verify that signature on a Java server. I looked the documentation but I don't understand how to verify the signature without the signer certificate. I suppose the certificate comes in the signature, but I don