W3C home > Mailing lists > Public > public-webid@w3.org > September 2012

Re: WebID questions -- was: [dane] Call for Adoption: "Using Secure DNS to Associate Certificates with Domain Names For S/MIME"

From: Kingsley Idehen <kidehen@openlinksw.com>
Date: Wed, 26 Sep 2012 13:03:54 -0400
Message-ID: <5063357A.2060704@openlinksw.com>
To: public-webid@w3.org
On 9/26/12 11:15 AM, Ben Laurie wrote:
> On 26 September 2012 14:16, Kingsley Idehen <kidehen@openlinksw.com> wrote:
>> On 9/26/12 6:14 AM, Ben Laurie wrote:
>>> Manually choosing one of hundreds of certs sure sounds like a problem to
>>> me!
>> It isn't [1][2][3] .
>>
>> I can make and destroy WebID watermarked X.509 certs. with alacrity.
> You can. Ordinary users can't. This is my point.

They can too and here are the options:

1. use a circa. 2012 certificate generator (hosted, desktop, or mobile 
phone) -- you have a link to an example in one of my responses (i.e., 
http://id.myopenlink.net/certgen) re. hosted variant

2. use what the OS provides -- Windows and Mac OS X have user friendly 
Wizards for generating certificates that allow you insert a WebID in the 
certs. SAN.

In all cases, its click, click, click and then either <keygen/> kicks in 
our you have a pkcs#12 file that saved locally or sent out via email.

It's dead simple. All we have to do is revisit this vital subject matter 
with end-users. This also why I suggest revisit email signing since 
circa. 2012, the artificial tedium associated with cert. generation is 
now truly behind us.

Kingsley
>> Link:
>>
>> 1. https://dl.dropbox.com/u/11096946/multiple-certs-are-fine-1.png --
>> example screenshot 1 from my keychain
>> 2. https://dl.dropbox.com/u/11096946/multiple-certs-are-fine-2.png --
>> screenshot 2
>> 3. http://id.myopenlink.net/certgen -- a simple WebID watermarked X.509
>> Certificate Generator (note: it will even verify your Cert using the WebID
>> protocol at the end of the process) .
>>
>>
>> --
>>
>> Regards,
>>
>> Kingsley Idehen
>> Founder & CEO
>> OpenLink Software
>> Company Web: http://www.openlinksw.com
>> Personal Weblog: http://www.openlinksw.com/blog/~kidehen
>> Twitter/Identi.ca handle: @kidehen
>> Google+ Profile: https://plus.google.com/112399767740508618350/about
>> LinkedIn Profile: http://www.linkedin.com/in/kidehen
>>
>>
>>
>>
>>
>
>


-- 

Regards,

Kingsley Idehen	
Founder & CEO
OpenLink Software
Company Web: http://www.openlinksw.com
Personal Weblog: http://www.openlinksw.com/blog/~kidehen
Twitter/Identi.ca handle: @kidehen
Google+ Profile: https://plus.google.com/112399767740508618350/about
LinkedIn Profile: http://www.linkedin.com/in/kidehen







Received on Wednesday, 26 September 2012 17:04:18 UTC

This archive was generated by hypermail 2.3.1 : Sunday, 31 March 2013 14:40:59 UTC