Re: ACTION-272: self-signed certificates

I'm unclear how this interacts with other proposals in terms of inputting 
data (particularly login credentials) the first few times I visit such a 
site. It sounds like the recommendation would make them look totally 
unidentified. Is that right? I think I'd need to consider this in the 
context of, say, Identity Signal to understand the impact and 
implications. 

          Mez







Re: ACTION-272: self-signed certificates

Thomas Roessler 
to:
public-wsc-wg
07/26/2007 11:54 AM


Sent by:
public-wsc-wg-request@w3.org








I've added the material on self-signed certificates to the wiki, and
to the recommendation proposal index:

  http://www.w3.org/2006/WSC/wiki/RecSelfSigned

Regards,
-- 
Thomas Roessler, W3C  <tlr@w3.org>





On 2007-07-26 10:24:58 -0500, Thomas Roessler wrote:
> From: Thomas Roessler <tlr@w3.org>
> To: public-wsc-wg@w3.org
> Date: Thu, 26 Jul 2007 10:24:58 -0500
> Subject: ACTION-272: self-signed certificates
> X-Spam-Level: 
> X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.1.5
> 
> Attached, you'll find a proposal on how to deal with self-signed
> certificates; credit for 99% of the content goes to Stephen.  I'll
> put it in the wiki as soon as I've found a useful converter, which
> will be during the next very few hours.
> 
> Regards,
> -- 
> Thomas Roessler, W3C  <tlr@w3.org>