A better approach to security

[Duane <duane AT cacert.org>]

Tabor Kelly wrote:

> I am a new user of cacert.org (and of the mailing list), so I am sorry 
> if I should have sent this message to support AT cacert.org instead (please 
> correct me if I am wrong).

This list is fine...

> First, I am a new user to X.509 and I was very concerned that when the 
> cacert.org server created my certificate, it also created my private key 
> (I understand that it created my public key). I hopped on the IRC 
> channel and wren explained that my browser actually created my private 
> key. My point being, that I think this should be explained in the help 
> section of the cacert.org web site.
>
> Second, I use thunderbird as my e-mail client. Thunderbird is not 
> capable of downloading certificates via URLS. So I downloaded it via 
> firefox, backed it up as a .p12 file, and loaded it into thunderbird via 
> the .p12 file. My point being, that it took me a long time to figure out 
> how to get the certificate into thunderbird, and the cacert.org site did 
> not explain how.

If you have notes on either of these points we'd happily publish these 
to the website, this isn't a job for anyone so time is limited to what 
people volunteering their time for can get accomplished. Kevin Reiter 
has proposed a documentation building group on this list a few weeks 
ago, I'm not sure what's happened since however.

> PSS- Is it bad form to sign messages going to email lists? This list? 
> All lists?

Possibly this is the only list that won't nag you about it ever since 
that's part of the point of doing it, other lists, well you'd have to 
ask them, I'd say it depends how technically/security minded the 
majority are...

--

Best regards,
 Duane

http://www.cacert.org - Free Security Certificates
http://www.nodedb.com - Think globally, network locally
http://www.sydneywireless.com - Telecommunications Freedom
http://happysnapper.com.au - Sell your photos over the net!
http://e164.org - Using Enum.164 to interconnect asterisk servers

"I do not try to dance better than anyone else.
        I only try to dance better than myself."