Hello, I just reinstalled a box that was using a Thawte free email digital certificate to secure email communications. That service is now gone and the key is about to expire. I'd like to know if there are any alternatives that people are using? I'd like for maximum client compatibility preferably without having to manually install the company's intermediate cert? Thanks. Dave.
I do mine through cacert.org. I favor them because they are a non- profit and they use the web of trust model. You get assured at cacert.org by having other people who are already assured vouch for you. Of course, that can be difficult depending on where you live so they also let you get assured by going to 2 notaries public. Every bank has a notary public. I don't know how widely their root cert is circulated. It wasn't in IE6 and Windows xP. I mostly use linux and I know that their root cert has been in the ca-certificates package for debian & ubuntu for 4 or 5 years already. But I don't know about Windows 7. Like I said, I favor cacert.org as a matter of principle. But if it weren't for the Windows issue, I'd recommend them highly. Their web site is very accessible and easy to use. Once you get assured, you can issue certificates to your hearts content. I don't usually bother backing up my certs because they're on the cacert.org web site. I wouldnt necessarily use cacert.org for a productio, commercial web site but I use their certs all the time for testing or home web sites. I think you can point a browser to my home machine athttps://www.johnheim.net to see what happens with windows and a site using a cecert.org cert. I may have restricted acess to that site by IP address. I'll check on that and unrestrict it Îtoday. On Oct 2, 2010, at 12:13 AM, David Mehler wrote:
Hello, I just reinstalled a box that was using a Thawte free email digital certificate to secure email communications. That service is now gone and the key is about to expire. I'd like to know if there are any alternatives that people are using? I'd like for maximum client compatibility preferably without having to manually install the company's intermediate cert? Thanks. Dave.
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
Hi John,
Thanks, i'll check cacert.org out. I had done so about maybe a year
and a half back, the thing that stopped me was their root cert was not
in platforms I was using.
I've also heard about StartSSL and comodo has anyone heard of or tried
either of those? Any experiences good or bad?
Also, do any open source web mail clients allow digitally signing
email messages? The two I can think of right off the bat are
squirrelmail and roundcubemail, but I know their are more. Like, you
upload the cert to the server and the webmail program can utilize it?
Thanks.
Dave.
On 10/2/10, John Heim
I do mine through cacert.org. I favor them because they are a non- profit and they use the web of trust model. You get assured at cacert.org by having other people who are already assured vouch for you. Of course, that can be difficult depending on where you live so they also let you get assured by going to 2 notaries public. Every bank has a notary public.
I don't know how widely their root cert is circulated. It wasn't in IE6 and Windows xP. I mostly use linux and I know that their root cert has been in the ca-certificates package for debian & ubuntu for 4 or 5 years already. But I don't know about Windows 7. Like I said, I favor cacert.org as a matter of principle. But if it weren't for the Windows issue, I'd recommend them highly. Their web site is very accessible and easy to use. Once you get assured, you can issue certificates to your hearts content. I don't usually bother backing up my certs because they're on the cacert.org web site.
I wouldnt necessarily use cacert.org for a productio, commercial web site but I use their certs all the time for testing or home web sites. I think you can point a browser to my home machine athttps://www.johnheim.net to see what happens with windows and a site using a cecert.org cert. I may have restricted acess to that site by IP address. I'll check on that and unrestrict it Îtoday.
On Oct 2, 2010, at 12:13 AM, David Mehler wrote:
Hello, I just reinstalled a box that was using a Thawte free email digital certificate to secure email communications. That service is now gone and the key is about to expire. I'd like to know if there are any alternatives that people are using? I'd like for maximum client compatibility preferably without having to manually install the company's intermediate cert? Thanks. Dave.
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
Hi,
I use Globalsign almost exclusively now at work, they do some cheap email signatures, not sure about free though...
Andrew.
-----Original Message-----
From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of David Mehler
Sent: 02 October 2010 18:35
To: Blind sysadmins list
Subject: Re: [Blind-sysadmins] Free Digital Email Certificate
Hi John,
Thanks, i'll check cacert.org out. I had done so about maybe a year and a half back, the thing that stopped me was their root cert was not in platforms I was using.
I've also heard about StartSSL and comodo has anyone heard of or tried either of those? Any experiences good or bad?
Also, do any open source web mail clients allow digitally signing email messages? The two I can think of right off the bat are squirrelmail and roundcubemail, but I know their are more. Like, you upload the cert to the server and the webmail program can utilize it?
Thanks.
Dave.
On 10/2/10, John Heim
I do mine through cacert.org. I favor them because they are a non- profit and they use the web of trust model. You get assured at cacert.org by having other people who are already assured vouch for you. Of course, that can be difficult depending on where you live so they also let you get assured by going to 2 notaries public. Every bank has a notary public.
I don't know how widely their root cert is circulated. It wasn't in IE6 and Windows xP. I mostly use linux and I know that their root cert has been in the ca-certificates package for debian & ubuntu for 4 or 5 years already. But I don't know about Windows 7. Like I said, I favor cacert.org as a matter of principle. But if it weren't for the Windows issue, I'd recommend them highly. Their web site is very accessible and easy to use. Once you get assured, you can issue certificates to your hearts content. I don't usually bother backing up my certs because they're on the cacert.org web site.
I wouldnt necessarily use cacert.org for a productio, commercial web site but I use their certs all the time for testing or home web sites. I think you can point a browser to my home machine athttps://www.johnheim.net to see what happens with windows and a site using a cecert.org cert. I may have restricted acess to that site by IP address. I'll check on that and unrestrict it Îtoday.
On Oct 2, 2010, at 12:13 AM, David Mehler wrote:
Hello, I just reinstalled a box that was using a Thawte free email digital certificate to secure email communications. That service is now gone and the key is about to expire. I'd like to know if there are any alternatives that people are using? I'd like for maximum client compatibility preferably without having to manually install the company's intermediate cert? Thanks. Dave.
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
Hi,
I use Globalsign almost exclusively now at work, they do some cheap email signatures, not sure about free though...
Andrew.
-----Original Message-----
From: blind-sysadmins-bounces@lists.hodgsonfamily.org [mailto:blind-sysadmins-bounces@lists.hodgsonfamily.org] On Behalf Of David Mehler
Sent: 02 October 2010 18:35
To: Blind sysadmins list
Subject: Re: [Blind-sysadmins] Free Digital Email Certificate
Hi John,
Thanks, i'll check cacert.org out. I had done so about maybe a year and a half back, the thing that stopped me was their root cert was not in platforms I was using.
I've also heard about StartSSL and comodo has anyone heard of or tried either of those? Any experiences good or bad?
Also, do any open source web mail clients allow digitally signing email messages? The two I can think of right off the bat are squirrelmail and roundcubemail, but I know their are more. Like, you upload the cert to the server and the webmail program can utilize it?
Thanks.
Dave.
On 10/2/10, John Heim
I do mine through cacert.org. I favor them because they are a non- profit and they use the web of trust model. You get assured at cacert.org by having other people who are already assured vouch for you. Of course, that can be difficult depending on where you live so they also let you get assured by going to 2 notaries public. Every bank has a notary public.
I don't know how widely their root cert is circulated. It wasn't in IE6 and Windows xP. I mostly use linux and I know that their root cert has been in the ca-certificates package for debian & ubuntu for 4 or 5 years already. But I don't know about Windows 7. Like I said, I favor cacert.org as a matter of principle. But if it weren't for the Windows issue, I'd recommend them highly. Their web site is very accessible and easy to use. Once you get assured, you can issue certificates to your hearts content. I don't usually bother backing up my certs because they're on the cacert.org web site.
I wouldnt necessarily use cacert.org for a productio, commercial web site but I use their certs all the time for testing or home web sites. I think you can point a browser to my home machine athttps://www.johnheim.net to see what happens with windows and a site using a cecert.org cert. I may have restricted acess to that site by IP address. I'll check on that and unrestrict it Îtoday.
On Oct 2, 2010, at 12:13 AM, David Mehler wrote:
Hello, I just reinstalled a box that was using a Thawte free email digital certificate to secure email communications. That service is now gone and the key is about to expire. I'd like to know if there are any alternatives that people are using? I'd like for maximum client compatibility preferably without having to manually install the company's intermediate cert? Thanks. Dave.
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
_______________________________________________ Blind-sysadmins mailing list Blind-sysadmins@lists.hodgsonfamily.org http://lists.hodgsonfamily.org/listinfo/blind-sysadmins
How to set a hotkey to unmount an USB drive? Thanks!
participants (4)
-
Andrew Hodgson -
coscell＠mail.batol.net -
David Mehler -
John Heim