Gavin Greig (ggreig) wrote,
Gavin Greig
ggreig

Web Unravels

According to Slashdot, the Thawte Web of Trust (of which I, tobyawand qidaneare notaries) is ending in less than 2 weeks' time – or November 16th, depending on which you believe. Maybe someone didn’t notice this was October.

The original article is Slashdotted, so I haven’t been able to read it, but if it is true it’ll be a little bit sad and quite a lot unsurprising.

E-mail certificates are one of those things that are good in theory, but difficult to convince people they’re worthwhile. Their main purpose is to show that e-mail hasn’t been tampered with since it was sent, and that it was sent from a particular person’s account; not problems that many people worry about, even with spam spoofing e-mail addresses to appear to come from people you know.

Perhaps a little more practically, if more widely taken up certificates might help to restrict spam a bit by requiring people to prove their identity to someone – but they’ve never had that take-up, and if they did then spammers would of course find ways to acquire certificates unrelated to their real identities. Faking identity would not, in the end, prove much of a hurdle.

There are other drawbacks too. Some e-mail systems (particularly web-based ones) don’t know what to do with certificates, so they make recipients more suspicious of the e-mail with the odd attachment, rather than less. And for the average user, the process of signing up for a certificate is scary and arcane. Although you can mostly click Next – Next – Next, there’s a lot of forbidding technical terminology floating about.

Finally there’s the biggest reason why I’m not surprised if Thawte have canned their free certificates program, and also why I’ve not been over-enthusiastic to recommend them for the last couple of years; they’ve never updated the sign-up process to work with Windows Vista’s higher level of security, and their instructions for working around the issue start “Turn off the Windows Firewall”…

E-mail certificates are still a mildly good idea, but Thawte’s free offering hasn’t been too attractive for some time – and unfortunately the alternatives cost.

Tags: current affairs, information technology, obituary
Subscribe

  • Electric Hurdy Gurdy

    Check out Guilhem Desq, lead hurdy gurdy player in Arcane Alchemists: Transmutation sounds like a Bond theme: This entry was…

  • Inside the Mark I Tank

    Here’s a really interesting video from the World of Tanks people. Yes, it’s a YouTube video, but you can drag your viewpoint around to see the…

  • Weekend - Peter Pan, Bon Scott and Sydney Padua

    It’s been a while since I wrote, you know, actual words here – nearly six months, which is my longest gap ever – so I thought I’d make a cursory…

  • Post a new comment

    Error

    default userpic

    Your reply will be screened

    Your IP address will be recorded 

    When you submit the form an invisible reCAPTCHA check will be performed.
    You must follow the Privacy Policy and Google Terms of use.
  • 0 comments