Re: JNLP & Web start & signing?



On Thu, 28 Jul 2005 03:38:09 GMT, Dale King wrote:

> Andrew Thompson wrote:
>> On Wed, 27 Jul 2005 12:57:31 GMT, Andrew Thompson wrote:
>>
>>>On Wed, 27 Jul 2005 12:36:20 GMT, Dale King wrote:
>>>
>>>>They are making a legally binding
>>>>claim that you truly are who you say that you are.
>>>
>>><loaded question>
>>>..In what municipality is it legally binding?
>>></loaded question>
>>
>> Actually - given I originally misread 'they' as the
>> person/organisation getting the certificate (as
>> opposed to *Verisign*), it does not make much sense.
>>
>> It is significantly different, in that the geographic
>> locality of any legal actions against the CA is clear,
>> or at least clearly stated.
>
> Legally binding may not still be a good way of saying it. What I meant
> was that there can be legal ramifications if they are wrong about such a
> claim. Therefore they do verification of your claim.

Got it. Yes, I see where you're coming from.

At the very least the CA's are putting their business
reputation on the line.

I was originally thinking of an end user of the
certificate that might actually be some 'fly-by-night'
virus distributor, as being the party most likely
to vanish into thin air when the sh*t hit the fan.

That is the only reason I honed in your mention of
legalities. An *end* *user* of the certificate could
(potentially) avoid legal ramifications. Both by
anonymity, and dispute over what rules actually apply
(is it in the place the CA exists/is registered, the
place the certificate holder is ..or claims to be,
...or the place where an injured party has dragged
them both into court?).

Making fine distinctions over the legalities of the
agreement (in attempts to avoid responsibility) is
not something that makes much sense for a CA in the
long term. Their business *depends* on a very public,
trustworthy and consistent existence.

--
Andrew Thompson
physci.org 1point1c.org javasaver.com lensescapes.com athompson.info
Transmitido en Martian en SAP
.



Relevant Pages

  • Re: JNLP & Web start & signing?
    ... On Wed, 27 Jul 2005 12:57:31 GMT, Andrew Thompson wrote: ... > ..In what municipality is it legally binding? ... locality of any legal actions against the CA is clear, ...
    (comp.lang.java.help)
  • Re: Applet notinited
    ... On 27-8-2004 0:04, Andrew Thompson wrote: ... > Certificate Not Verified ... distributesd by "SEAGULL HOLDING N.V."? ... back to a Certification Authority. ...
    (comp.lang.java.help)