who own the key?

Hi.

I remember we have discussed about the ownership of key.

to clarify the key ownership, I send this mail.

who own the key?
is it belong to user or application of service provider?
who has control for generated key?

is the view of certificate side, key pair is belong to user.
but the key pair of current low level API, it seams belong to application
side.

is my understanding correct?

-- 
Mountie Lee

PayGate
CTO, CISSP
Tel : +82 2 2140 2700
E-Mail : mountie@paygate.net

=======================================
PayGate Inc.
THE STANDARD FOR ONLINE PAYMENT
for Korea, Japan, China, and the World