[Noisebridge-discuss] TPM

d p chang weasel at meer.net
Wed Jul 22 21:25:34 UTC 2009


Rodney Thayer <redshuttlegunner at gmail.com> writes:

> Al Billings wrote:
>> 
>> On Jul 22, 2009, at 11:31 AM, Rodney Thayer wrote:
>> 
>>> CACert is questionable too.  why not just spin your own root and put
>>> it on an offline box?
>> 
>> Because you are going to get the same SSL warnings and alert from 
>> software if you use any root that isn't in the shipped store with the 
>> software. This is certainly true for Firefox.
>> 
> ...and therefor you have to deploy the root to Noisebridge users... is
> that a problem/

hmmm... this goes towards jake's chain/web of trust (in
<4A676051.2030708 at appelbaum.net>). how does one distribute the
root/ca/whatever to people who don't know to trust you?

\p
---
There is nothing in a caterpillar that tells you it's going to be a
butterfly. - Buckminster Fuller



More information about the Noisebridge-discuss mailing list