- From: Kingsley Idehen <kidehen@openlinksw.com>
- Date: Wed, 26 Sep 2012 13:03:54 -0400
- To: public-webid@w3.org
- Message-ID: <5063357A.2060704@openlinksw.com>
On 9/26/12 11:15 AM, Ben Laurie wrote: > On 26 September 2012 14:16, Kingsley Idehen <kidehen@openlinksw.com> wrote: >> On 9/26/12 6:14 AM, Ben Laurie wrote: >>> Manually choosing one of hundreds of certs sure sounds like a problem to >>> me! >> It isn't [1][2][3] . >> >> I can make and destroy WebID watermarked X.509 certs. with alacrity. > You can. Ordinary users can't. This is my point. They can too and here are the options: 1. use a circa. 2012 certificate generator (hosted, desktop, or mobile phone) -- you have a link to an example in one of my responses (i.e., http://id.myopenlink.net/certgen) re. hosted variant 2. use what the OS provides -- Windows and Mac OS X have user friendly Wizards for generating certificates that allow you insert a WebID in the certs. SAN. In all cases, its click, click, click and then either <keygen/> kicks in our you have a pkcs#12 file that saved locally or sent out via email. It's dead simple. All we have to do is revisit this vital subject matter with end-users. This also why I suggest revisit email signing since circa. 2012, the artificial tedium associated with cert. generation is now truly behind us. Kingsley >> Link: >> >> 1. https://dl.dropbox.com/u/11096946/multiple-certs-are-fine-1.png -- >> example screenshot 1 from my keychain >> 2. https://dl.dropbox.com/u/11096946/multiple-certs-are-fine-2.png -- >> screenshot 2 >> 3. http://id.myopenlink.net/certgen -- a simple WebID watermarked X.509 >> Certificate Generator (note: it will even verify your Cert using the WebID >> protocol at the end of the process) . >> >> >> -- >> >> Regards, >> >> Kingsley Idehen >> Founder & CEO >> OpenLink Software >> Company Web: http://www.openlinksw.com >> Personal Weblog: http://www.openlinksw.com/blog/~kidehen >> Twitter/Identi.ca handle: @kidehen >> Google+ Profile: https://plus.google.com/112399767740508618350/about >> LinkedIn Profile: http://www.linkedin.com/in/kidehen >> >> >> >> >> > > -- Regards, Kingsley Idehen Founder & CEO OpenLink Software Company Web: http://www.openlinksw.com Personal Weblog: http://www.openlinksw.com/blog/~kidehen Twitter/Identi.ca handle: @kidehen Google+ Profile: https://plus.google.com/112399767740508618350/about LinkedIn Profile: http://www.linkedin.com/in/kidehen
Attachments
- application/pkcs7-signature attachment: S/MIME Cryptographic Signature
Received on Wednesday, 26 September 2012 17:04:18 UTC