openPGP vs x509

John Clizbe JPClizbe at comcast.net
Tue Apr 13 19:59:33 CEST 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Per Tunedal Casual wrote:

> At 20:34 2004-04-07, Werner Koch wrote:
>
>  >For a casual user it is far easier to create a PGP key than an X.509
>  >key/certificate.  You can instantly do this with OpenPGP tools (ssh is
>  >similar) whereas you have to go into lengthy discussions with OpenSSL
>  >to create even just a self-signed certificate containing a usable
>  >email attribute.
> OT? I have been looking for tools to make self-signed X.509 but haven't
> found any. Do you have any hints? Links?
> Rational: some people refuse using PGP-encryption/signing.
> Per Tunedal

Why not just obtain a free cert from Thawte or CA Cert?

That would certainly be less work than creating your own CA for a
self-signed X.509 cert.

- --
John P. Clizbe                   Inet:   JPClizbe(a)comcast DOT nyet
Golden Bear Networks             PGP/GPG KeyID: 0x608D2A10
  "Most men take the straight and narrow. A few take the road less
traveled.  I chose to cut through the woods."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.3.5 (Windows 2000 SP4)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
Comment: Annoy John Asscraft -- Use Strong Encyption

iD8DBQFAfCqDHQSsSmCNKhARAoJPAKDudOBhOrz3Vh+tteFYqXpdMAwTwwCffnsZ
Y8ptgjNj7q6vLnCE6aYZdqI=
=f/DQ
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list