CA Cert (cacert.org) - a new, non-profit CA

Ben Pollinger pgpgp@pollinger.org.uk
Mon Sep 22 19:48:02 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear list folk,

[apologies for cross-posting]

Just wanted to mention a new, free CA at www.cacert.org

It's based on Thawte's CA model, issuing signed X.509 certificates
for email and servers. Some interesting differences though:

 - server certificates are free (or very cheap)
 - any charges are small, and one-off (cf. Verisign, Thawte etc.)
 - they sign PGP keys (as Thawte used to) *
 - it's a non-profit organisation
 - they're piloting a time-stamping service

(* - some problems with RSA v4 keys recently, which should be
resolved soon-ish)

The root CA is not included in browsers, but they're working on it.
One route is via a request for enhancement at Mozilla -  see
http://bugzilla.mozilla.org/show_bug.cgi?id=215243  (257 votes as of
today)

For more info, please visit www.cacert.org , and maybe sign up to the
mailman list at http://lists.cacert.org/mailman/listinfo/cacert

I have no connection with CA Cert, other than being signed up as an
assurer (much like Thawte's notary system). Just thought some folk
would be interested in it.

Regards,
Ben
- --
Ben Pollinger
www.pollinger.org.uk
www.psyclick.org.uk
PGP'd email welcome

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
Comment: ...or GnuPG 1.2.3. <> Keys from www.pollinger.org.uk

iQA/AwUBP281e2B6yoUweI/vEQJoFACfXlWMlXXuCRIbCu96nD0NoMj1uvIAn0bO
q20u0yAKimWe5j2Vnqnrfcyz
=sRTK
-----END PGP SIGNATURE-----