Anybody know a good FREE certificate service?

Hey all - I am looking for a FREE reputable certificate service.
Verisign charges $15 a year so they are out. I have heard of thawte.com
and they offer free certificates. Anybody use them, any other
recommendations? Thanks!

Regards,
Aaron

Aaron Delp

"Aaron Delp" <> wrote in message
news:zGAQb.5708$ m...
> Hey all - I am looking for a FREE reputable certificate service.
> Verisign charges $15 a year so they are out. I have heard of thawte.com
> and they offer free certificates. Anybody use them, any other
> recommendations? Thanks!

What sort of certificate?

You can self-certify or pay for a site cert, but for email Thawte do their
"web of trust" (or whatever) thing.

(Basically a bit of a con, IMHO: once you start to look into it, you either
have to travel the world showing your passport to all and sundry or simply
pay-up. /I/ certainly wouldn't ascribe any particular trust to such an
email..).

Not sure where your browser keeps its certificates, but a look at some of
the roots might give you a few pointers on places to try.

HTH

Hairy One Kenobi

Disclaimer: the opinions expressed in this opinion do not necessarily
reflect the opinions of the highly-opinionated person expressing the opinion
in the first place. So there!

The Certificates Store can be found by...

Start --> settings --> control panel --> internet options --> content --> certificates

BTW: If you sort by Expiration date, you can delete certificates (and there will be many)
that have expired (those with dates prior to Today). I don't understand why the OS can't
auto-delete expired certs.

Dave



"Hairy One Kenobi" <abuse@[127.0.0.1]> wrote in message
news:WGBQb.10172$...
| "Aaron Delp" <> wrote in message
| news:zGAQb.5708$ m...
| > Hey all - I am looking for a FREE reputable certificate service.
| > Verisign charges $15 a year so they are out. I have heard of thawte.com
| > and they offer free certificates. Anybody use them, any other
| > recommendations? Thanks!
|
| What sort of certificate?
|
| You can self-certify or pay for a site cert, but for email Thawte do their
| "web of trust" (or whatever) thing.
|
| (Basically a bit of a con, IMHO: once you start to look into it, you either
| have to travel the world showing your passport to all and sundry or simply
| pay-up. /I/ certainly wouldn't ascribe any particular trust to such an
| email..).
|
| Not sure where your browser keeps its certificates, but a look at some of
| the roots might give you a few pointers on places to try.
|
| HTH
|
| Hairy One Kenobi
|
| Disclaimer: the opinions expressed in this opinion do not necessarily
| reflect the opinions of the highly-opinionated person expressing the opinion
| in the first place. So there!
|
|

"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:EwEQb.4917$...
> The Certificates Store can be found by...
>
> Start --> settings --> control panel --> internet options --> content -->
certificates
>
> BTW: If you sort by Expiration date, you can delete certificates (and
there will be many)
> that have expired (those with dates prior to Today). I don't understand
why the OS can't
> auto-delete expired certs.

Mozilla too? That's what he was using..

H1K

> "Hairy One Kenobi" <abuse@[127.0.0.1]> wrote in message
> news:WGBQb.10172$...
> | "Aaron Delp" <> wrote in message
> | news:zGAQb.5708$ m...
> | > Hey all - I am looking for a FREE reputable certificate service.
> | > Verisign charges $15 a year so they are out. I have heard of
thawte.com
> | > and they offer free certificates. Anybody use them, any other
> | > recommendations? Thanks!
> |
> | What sort of certificate?
> |
> | You can self-certify or pay for a site cert, but for email Thawte do
their
> | "web of trust" (or whatever) thing.
> |
> | (Basically a bit of a con, IMHO: once you start to look into it, you
either
> | have to travel the world showing your passport to all and sundry or
simply
> | pay-up. /I/ certainly wouldn't ascribe any particular trust to such an
> | email..).
> |
> | Not sure where your browser keeps its certificates, but a look at some
of
> | the roots might give you a few pointers on places to try.

I missed that. I know Netscape has its own Cert. Store, I assume Moziilla would too.

Dave



"Hairy One Kenobi" <abuse@[127.0.0.1]> wrote in message
news:w7FQb.10309$...
| "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
| news:EwEQb.4917$...
| > The Certificates Store can be found by...
| >
| > Start --> settings --> control panel --> internet options --> content -->
| certificates
| >
| > BTW: If you sort by Expiration date, you can delete certificates (and
| there will be many)
| > that have expired (those with dates prior to Today). I don't understand
| why the OS can't
| > auto-delete expired certs.
|
| Mozilla too? That's what he was using..
|
| H1K
|
| > "Hairy One Kenobi" <abuse@[127.0.0.1]> wrote in message
| > news:WGBQb.10172$...
| > | "Aaron Delp" <> wrote in message
| > | news:zGAQb.5708$ m...
| > | > Hey all - I am looking for a FREE reputable certificate service.
| > | > Verisign charges $15 a year so they are out. I have heard of
| thawte.com
| > | > and they offer free certificates. Anybody use them, any other
| > | > recommendations? Thanks!
| > |
| > | What sort of certificate?
| > |
| > | You can self-certify or pay for a site cert, but for email Thawte do
| their
| > | "web of trust" (or whatever) thing.
| > |
| > | (Basically a bit of a con, IMHO: once you start to look into it, you
| either
| > | have to travel the world showing your passport to all and sundry or
| simply
| > | pay-up. /I/ certainly wouldn't ascribe any particular trust to such an
| > | email..).
| > |
| > | Not sure where your browser keeps its certificates, but a look at some
| of
| > | the roots might give you a few pointers on places to try.
|
|

I was just looking for a certificate for e-mail to sign and encrypt.
That is good to know about their program. I saw it was free and I came
across a few people who used it but I am just skeptical of any funny
programs. As much as I hate to say it these days, I don't do ANYTHING
for free on the Internet without checking it out anymore.

Regards,
Aaron
Hairy One Kenobi wrote:

> "Aaron Delp" <> wrote in message
> news:zGAQb.5708$ m...
>
>>Hey all - I am looking for a FREE reputable certificate service.
>>Verisign charges $15 a year so they are out. I have heard of thawte.com
>>and they offer free certificates. Anybody use them, any other
>>recommendations? Thanks!
>
>
> What sort of certificate?
>
> You can self-certify or pay for a site cert, but for email Thawte do their
> "web of trust" (or whatever) thing.
>
> (Basically a bit of a con, IMHO: once you start to look into it, you either
> have to travel the world showing your passport to all and sundry or simply
> pay-up. /I/ certainly wouldn't ascribe any particular trust to such an
> email..).
>
> Not sure where your browser keeps its certificates, but a look at some of
> the roots might give you a few pointers on places to try.
>
> HTH
>
> Hairy One Kenobi
>
> Disclaimer: the opinions expressed in this opinion do not necessarily
> reflect the opinions of the highly-opinionated person expressing the opinion
> in the first place. So there!
>
>

Mozilla does, Edit -> Preferences -> Privacy & Security -> Certificates
-> Manage Certificates.

Regards,
Aaron

David H. Lipman wrote:

> I missed that. I know Netscape has its own Cert. Store, I assume Moziilla would too.
>
> Dave
>
>
>
> "Hairy One Kenobi" <abuse@[127.0.0.1]> wrote in message
> news:w7FQb.10309$...
> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
> | news:EwEQb.4917$...
> | > The Certificates Store can be found by...
> | >
> | > Start --> settings --> control panel --> internet options --> content -->
> | certificates
> | >
> | > BTW: If you sort by Expiration date, you can delete certificates (and
> | there will be many)
> | > that have expired (those with dates prior to Today). I don't understand
> | why the OS can't
> | > auto-delete expired certs.
> |
> | Mozilla too? That's what he was using..
> |
> | H1K
> |
> | > "Hairy One Kenobi" <abuse@[127.0.0.1]> wrote in message
> | > news:WGBQb.10172$...
> | > | "Aaron Delp" <> wrote in message
> | > | news:zGAQb.5708$ m...
> | > | > Hey all - I am looking for a FREE reputable certificate service.
> | > | > Verisign charges $15 a year so they are out. I have heard of
> | thawte.com
> | > | > and they offer free certificates. Anybody use them, any other
> | > | > recommendations? Thanks!
> | > |
> | > | What sort of certificate?
> | > |
> | > | You can self-certify or pay for a site cert, but for email Thawte do
> | their
> | > | "web of trust" (or whatever) thing.
> | > |
> | > | (Basically a bit of a con, IMHO: once you start to look into it, you
> | either
> | > | have to travel the world showing your passport to all and sundry or
> | simply
> | > | pay-up. /I/ certainly wouldn't ascribe any particular trust to such an
> | > | email..).
> | > |
> | > | Not sure where your browser keeps its certificates, but a look at some
> | of
> | > | the roots might give you a few pointers on places to try.
> |
> |
>
>

Aaron Delp wrote:
> Mozilla does, Edit -> Preferences -> Privacy & Security -> Certificates
> -> Manage Certificates.
>
> Regards,
> Aaron
>
> David H. Lipman wrote:
>
>> I missed that. I know Netscape has its own Cert. Store, I assume
>> Moziilla would too.
>>
>> Dave
>>
>>
>>
>> "Hairy One Kenobi" <abuse@[127.0.0.1]> wrote in message
>> news:w7FQb.10309$...
>> | "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
>> | news:EwEQb.4917$...
>> | > The Certificates Store can be found by...
>> | >
>> | > Start --> settings --> control panel --> internet options -->
>> content -->
>> | certificates
>> | >
>> | > BTW: If you sort by Expiration date, you can delete certificates
>> (and
>> | there will be many)
>> | > that have expired (those with dates prior to Today). I don't
>> understand
>> | why the OS can't
>> | > auto-delete expired certs.
>> |
>> | Mozilla too? That's what he was using..
>> |
>> | H1K
>> |
>> | > "Hairy One Kenobi" <abuse@[127.0.0.1]> wrote in message
>> | > news:WGBQb.10172$...
>> | > | "Aaron Delp" <> wrote in message
>> | > | news:zGAQb.5708$ m...
>> | > | > Hey all - I am looking for a FREE reputable certificate service.
>> | > | > Verisign charges $15 a year so they are out. I have heard of
>> | thawte.com
>> | > | > and they offer free certificates. Anybody use them, any other
>> | > | > recommendations? Thanks!
>> | > |
>> | > | What sort of certificate?
>> | > |
>> | > | You can self-certify or pay for a site cert, but for email
>> Thawte do
>> | their
>> | > | "web of trust" (or whatever) thing.
>> | > |
>> | > | (Basically a bit of a con, IMHO: once you start to look into it,
>> you
>> | either
>> | > | have to travel the world showing your passport to all and sundry or
>> | simply
>> | > | pay-up. /I/ certainly wouldn't ascribe any particular trust to
>> such an
>> | > | email..).
>> | > |
>> | > | Not sure where your browser keeps its certificates, but a look
>> at some
>> | of
>> | > | the roots might give you a few pointers on places to try.
>> |
>> |
>>
>>
Checked out my Moz Cert Manager and apparently I've got loads of certs.
I don't recall subscribing to any of these. Should I be concerned?
What's the consequences of deleting them all?

--
Regards.

Chris.
Please remove MAPSON (NOSPAM backwards) to reply to me by email.

"Chris Mitchell" <> wrote in message
news:bv24rm$pjj$...
> Aaron Delp wrote:

<snip>

> Checked out my Moz Cert Manager and apparently I've got loads of certs.
> I don't recall subscribing to any of these. Should I be concerned?
> What's the consequences of deleting them all?

You will either get a warning each time you open something that's signed.
Depending upon settings, things might just stop working without the warning.

They're there for a reason..

H1K

On Sat, 24 Jan 2004 21:44:21 -0000, whilst in NewsFroup
alt.computer.security, "Hairy One Kenobi" <abuse@[127.0.0.1]> articulated
the following sentiments :

>What sort of certificate?
>
>You can self-certify or pay for a site cert, but for email Thawte do their
>"web of trust" (or whatever) thing.
>
>(Basically a bit of a con, IMHO: once you start to look into it, you either
>have to travel the world showing your passport to all and sundry or simply
>pay-up. /I/ certainly wouldn't ascribe any particular trust to such an
>email..).

If you join the Thawte Web Of Trust, you can simply find notaries in your
area who you meet personally. No travelling the world necessary. It's no
different than meeting someone and exchanging PGP keys personally.

You do have to submit some information that some would be unhappy submitting
to get the free email certificate in the first place. To get your name on
it, you meet with notaries in your area, face to face, and they verify that
you are who you say you are, and vice versa. You get so many points awarded
for each notary who verifies you. When you reach the required level of
points, you can then download your new email certificate with your name on
it.

It boils down to how badly you want this kind of validation. You could say
it's not free, as you have to travel to meet people, admittedly not that far
if you check the site properly, but you do have to travel.

It's all explained on the Thawte site, and questions via email are answered
quite promptly.

http://www.thawte.com/html/COMMUNITY...nal/index.html

Pete.