[AktiviX-discuss] Why is the security certificate bad?

[andy baxter]

mp wrote:
> very interesting discussion - i wonder if anyone who understands all
> this will have the inclination to collect it on the wiki for future
> reference?
>   
I was thinking, as I said before, it would be more useful if there was a 
link to an *uncertified* page from the front page at www.aktivix.org, 
explaining it all. That way listmasters who get queries could direct 
people to that page as a way of answering the query. The wiki is no good 
for this because it has a certificate, so would have the same problem. 
The front page is already uncertified (I think), so this shouldn't be a 
problem I would imagine?

andy.
> Ian Gregory wrote:
>   
>> On Tue, Dec 04, 2007 at 05:56:27AM +0000, andy baxter wrote:
>>     
>>> Ian Gregory wrote:
>>>       
>>>> The server certificate is not required to create an encrypted
>>>> connection - only to make sure that the connection is to server
>>>> that you expect.
>>>>
>>>> Ian
>>>>   
>>>>         
>>> That's how I thought it was. You can log in to a machine over ssh (is 
>>> this the same as ssl?) without it having a certificate.
>>>       
>> ssh and ssl are not the same but there are plenty of similarities.
>> You can use something like a certificate with ssh - I think it is
>> referred to as a "host key".
>>
>> Ian
>>
>>     
>
> _______________________________________________
> AktiviX-discuss mailing list
> AktiviX-discuss at lists.aktivix.org
> https://lists.aktivix.org/mailman/listinfo/aktivix-discuss
>
>