No subject


Thu Sep 25 09:02:10 UTC 2008


Inclusion status

As of 2005[update], certificates issued by CAcert are not as useful in
web browsers as certificates issued by commercial CAs such as
VeriSign, because most installed web browsers do not distribute
CAcert's root certificate. Thus, for most web users, a certificate
signed by CAcert behaves like a self-signed certificate. There was
discussion for inclusion of CAcert's root certificate in Mozilla and
derivatives (such as Mozilla Firefox) but it was closed without
including it, at the end of April 2007.[5] This was after an audit was
suspended in December 2006 because CAcert needed to improve their
management system. There has been progress toward this and a new
request for inclusion may be expected in the future.[6] Getting the
CAcert root cert included into Mozilla is probably CAcert's largest
challenge right now, but one they are actively engaged in.[7] CAcert
is engaged to give more transparency in its management system.

The following operating systems or distributions include the CAcert
root certificate: [7]

Ark Linux
CentOS[citation needed]
Debian
FreeWRT
Gentoo
Internet Tablet OS (installed on Nokia Internet Tablets)[citation needed]
Knoppix
Mandriva Linux
MirOS BSD
OpenBSD

---

What a mess.

Simon



More information about the Nottingham mailing list