Re: [exim] Locally Sign certificates

Top Page
Delete this message
Reply to this message
Author: Ian Eiloart
Date:  
To: Kebba Foon
CC: exim-users
Subject: Re: [exim] Locally Sign certificates

On 5 Apr 2011, at 10:03, Kebba Foon wrote:

> Hi List,
>
> is it advisable to sign your own certificates to use on a production
> environment?


That probably depends what you're using them for. To authenticate user logins, with a small userbase, you'd probably be OK. You might want to provide your public signing key to user client machines. Otherwise, you're just educating users to accept potentially bad certificates.

For DKIM signatures, you'd probably want a well known certificate authority.

> --
> ## List details at http://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/


--
Ian Eiloart
Postmaster, University of Sussex
+44 (0) 1273 87-3148