IIS Server Security - verisign vs. microsoft certificate services

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > February 2004 > verisign vs. microsoft certificate services





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author verisign vs. microsoft certificate services
jt

2004-02-16, 4:35 am

im trying to implement https/ssl on my company's website
and was wondering if anyone out there has some experience
using the Microsoft Certificate Service for issuing
certificates. im looking for some pros and cons to going
this route rather than using Verisign as my certificate
authority. it seems to me that for my needs, the better
alternative is to handle this internally - but i want to
know of any problems people may have encountered with
Microsoft Certificate Service 2.0.

anything else on this vs. Verisign would be greatly
appreciates...

by the way - im running win2k server.

thanks much for the help!
Jochen Ruhland

2004-02-16, 10:35 am

Hi,

"jt" <anonymous@discussions.microsoft.com> schrieb:
> it seems to me that for my needs, the better
> alternative is to handle this internally - but i want to
> know of any problems people may have encountered with
> Microsoft Certificate Service 2.0.


the problem is that no browser in the world will trust your self-issued
certificate directly.

It's just like:

Hi, I'm Bob, I'm a good man and I have written it on a paper as a proof.

vs.

Hi, I'm Bob, I'm a good man and I have written it on a paper as a proof and
Mr. Bill signed that paper 'cause he knows me.

Jochen

David Martin

2004-02-20, 4:34 am

Cert Services will work just fine -

A self issued cert enables https use and for internal / own staff use I
don't see any problem - I use this and instruct external users to import the
cert and add my site to trusted sites.

as it is very fast to set up and test, evaluate for yourself.

Dave.

"Jochen Ruhland" <Jochen-NODOT-ruhland@gmx.de> wrote in message
news:OIPKlmO9DHA.3292@TK2MSFTNGP11.phx.gbl...
> Hi,
>
> "jt" <anonymous@discussions.microsoft.com> schrieb:
>
> the problem is that no browser in the world will trust your self-issued
> certificate directly.
>
> It's just like:
>
> Hi, I'm Bob, I'm a good man and I have written it on a paper as a proof.
>
> vs.
>
> Hi, I'm Bob, I'm a good man and I have written it on a paper as a proof

and
> Mr. Bill signed that paper 'cause he knows me.
>
> Jochen
>



Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com