Norman Gray wrote: > > On 2006 Aug 18 , at 14.35, Peter W. Draper wrote: > >>> You can get a free E-mail certificate from >>> http://www.thawte.com/secure-email/personal-email-certificates/index.html >>> >> >> I'd seen some descriptions of this one. The downside (as with many of >> these free ones) is that their root certificates are not distributed >> by SUN/Java, so it's still a fuss. > > I've got one -- it's signing this message. But I think it's flagged as > being for signing messages, and not signing code. Hang on -- how does > that work, then...? I'll have a closer look at this, as I've been doing > work with certificates recently. > I have an interest in this sort of thing at the moment. It does appear to be a necessary evil these days, but the cost is significant and I am not convinced that it has proved itself as a technology for everyone to use. These certs are dam complicated! Steve. > Thawte was one of the first big commercial CAs, and was bought out by > Verisign a few years ago (making its one-time owner, Mark Shuttleworth, > enough money that he could afford to be the world's first space tourist, > and now the sponsor of Ubuntu; yes, _that_ Mark Shuttleworth). Their > roots are very well distributed, and are in most browsers. If this > message shows up in your UI as being signed, that's why. > > See you, > > Norman > > > ------------------------------------------------------------------------------ > > Norman Gray / http://nxg.me.uk > eurovotech.org / University of Leicester, UK > > >