Re: [LUG] Certificate authorities was Re: Email encryption, was Re: www.dcglug.org.uk

[Brad Rogers <brad@xxxxxxxxxxxx>]

On Thu, 2 May 2013 16:43:25 +0100
Martijn Grooten <sweetwatergeek@xxxxxxxxx> wrote:

Hello Martijn,

>I'm still not sure Google is at fault though. It sounds to me that the
>default in Claws is unnecessarily strict.

Yes, CM errs on the side of caution/safety.  I like it that way.  OTOH,
no other company (that I deal with) has mail servers that have two certs
valid at any one time on their systems.  They all, when they change the
certificates, do all the machines at the same time.  At least, as far as
it's possible to perform such changes at the same time on (say) 200
machines.

I know also, that CM has the hidden pref setting you mention.  I don't
set it because of the previously mentioned security concerns regarding
forged certificates.

-- 
 Regards  _
         / )           "The blindingly obvious is
        / _)rad        never immediately apparent"
Who's a sucker now?
Edward The Bear - The Damned

Attachment: signature.asc
Description: PGP signature

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq