|
Posted by Buster on November 29, 2004, 10:52 am
If you were Registered and logged in, you could reply and use other advanced thread options
How was the PKCS#12 certificate meant to be used? At first we used it
for website cert for SSL encryption, then for e-mail s/mime
encryption, now we are using this exported key for our handheld usage.
The thing is, the regular x509 certificate is managed, all encrypted
files can be decrypted even if you loose the key, you can be recoved.
The PKCS12 certificate is unmanaged. Once you loose the key, it's
gone, granted you CRLs can be checked to inform you that the
certificate has been revoked, but if you encrypt anything with this,
you can never get it back. Also, when you import you key into the
microsoft certificate store - you're importing a PKCS12 - The
unmanaged key. If we are using PKCS12 for most things now, why are we
keeping a managed CA? And managing these keys that no one is using?
| 
XML site map