On Tue, 2008-09-02 at 10:33 -0430, Patrick O'Callaghan wrote:
The irony is that if you read Versign's documentation, they
don't
actually claim to guarantee this. They just go through some
standardized checking process involving external authorities such as
notaries or business registries. A sufficiently interested adversary
can quite easily register a company and get a certificate.
LOL... It does seem to be typical that security is just a veneer.
Some banks are just as bad, if you say that you don't have the
identification that they're asking for often enough, they give in and
let you do what you wanted without good verification. They can also be
too helpful with people who've forgotten their passwords.
--
[tim@localhost ~]$ uname -r
2.6.25.14-108.fc9.i686
Don't send private replies to my address, the mailbox is ignored. I
read messages from the public lists.