Re: ssl certificates [campus Certificate Authority?]

At 09:45 -0700 2004-09-22, Mike Friedman wrote:
>I'd like to see at least a campus-sponsored CA that could be used
>for conducting UCB business, even it it means that
>regular customers of campus applications would have to install a campus
>signer cert into their browsers (some departments already do this for
>themselves). Once such a CA existed, it could be promoted and some more
>focused education on this issue could be done.

   A question: isn't this a description of the campus's existing
CalNetPKI service?

   http://calnetpki.berkeley.edu

   Would one of my colleagues associated with this service be willing
to comment on its status and future plans? (I'm asking this because
someone who was likely a prime mover in setting up this service, Eric
Chamberlain, has recently left the university to work for smart
card-maker ActivCard.)

Aron Roberts
Workstation Software Support Group

P.S. Both the Windows and Macintosh versions of the C@B 2005 CD
<http://cab.berkeley.edu> already support installation of the
CalNetPKI root certificate, at least to some extent, for unmanaged
end users. The installer on the Mac side, for instance, adds the
CalNetPKI root certificate to the appropriate system keychain under
Mac OS X 10.2 and above, where it is available to Apple's Safari
browser and any other applications that use that keychain.

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Wed Sep 22 10:04:57 2004