True - and call me an idealist, but the responsible thing to do is provide corporate customers with better pre-sales information, including how to deploy PKI in a secure fashion. Simply securing a webserver/browser link over the Internet doesn't mean the site is any more or less secure. IMHO, the CAs are in the business of making money....that's fine.....but they could be more helpful to the security industry if they didn't market half-truths and not mention how to REALLY implement PKI to achieve a truly higher degree of security.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/60/10536#10536