[NMLUG] e-mail and digital ID's (signing and encrypting)

[wjl at icecavern.net (Wesley J. Landaker)]

On Wednesday 22 August 2007 15:59:18 Ed Heron wrote:
>   We've got a certificate for our domain.  We should be able to produce
> individual 'digital ID's for employees.  I realize this doesn't make
> additional money for the CA's, but we'll leave the philosophy out of it
> for the moment, ok?  If we were to pay for digital ID's for all
> employees, at $20/year/employee, it could quickly get out of control. 
> I'm not going to get approval to spend $1600/year on it.  I can barely
> get approval for $500 for a multiple server certificate for our web farm.

First of all, never pay for certs, it's not worth it and doesn't give you 
*any* added technical or security benefits.

If you are doing S/MIME, be your own CA, or use CAcert: 

http://www.cacert.org/

If you are smarter and are doing OpenPGP:

http://www.ietf.org/rfc/rfc2440.txt
http://www.gnupg.org/
... etc ...

-- 
Wesley J. Landaker <wjl at icecavern.net> <xmpp:wjl at icecavern.net>
OpenPGP FP: 4135 2A3B 4726 ACC5 9094  0097 F0A9 8A4C 4CD6 E3D2
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://lists.b9.com/pipermail/nmlug/attachments/20070822/18356cd1/attachment.pgp