[AktiviX-discuss] Why is the security certificate bad?

[mp]

very interesting discussion - i wonder if anyone who understands all
this will have the inclination to collect it on the wiki for future
reference?

Ian Gregory wrote:
> On Tue, Dec 04, 2007 at 05:56:27AM +0000, andy baxter wrote:
>> Ian Gregory wrote:
>>> The server certificate is not required to create an encrypted
>>> connection - only to make sure that the connection is to server
>>> that you expect.
>>>
>>> Ian
>>>   
>> That's how I thought it was. You can log in to a machine over ssh (is 
>> this the same as ssl?) without it having a certificate.
> 
> ssh and ssl are not the same but there are plenty of similarities.
> You can use something like a certificate with ssh - I think it is
> referred to as a "host key".
> 
> Ian
>