[Gllug] Spammers

[Jason Clifford]

On Tue, 23 Sep 2003, Peter Childs wrote:

> 	but if everyone shows there certificate you can always revoke that 
> certificate. If the agecy goes rogue you just revoke that agecy. Think 
> unique id's not. If you think somone else is using your certifacate CHANGE 
> IT.

Have you ever tried to revoke someone else certificate?

You wont be able to. All you'll be able to do is to blacklist that 
certificate locally - which just puts you back to where you are today.

As for dealing with higher level certs such as top level ones you have 
no defence at all in that case as so many other certs will depend upon it 
that doing so would totally break the protocol and the idea is still to 
exchange email with other servers.

Jason Clifford
-- 
UKFSN.ORG		Finance Free Software while you surf the 'net
http://www.ukfsn.org/		ADSL Broadband available now


-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug