Tag Info

Hot answers tagged

9

If its just a certificate there is not problem, as these only contain the public key. The problem is if the private key is publicised as is the case with for example id.rsa


7

To me "Unknown Publisher" is a red flag. It's one more bit of "polish" on your application. There's a story about a famous rock band that would give the venue a long list of requirements - things like how many electrical connections they needed, the size of the stage, placement of lights, distance to dressing rooms, etc. Included in that list was a ...


7

The warranty is kind of misleading, actually, because it's not issued to the purchaser of the certificate -- it's issued to the users of the site. So say you give your credit card details to a website that's verified by a CA that offers a warranty and the (fraudulent) site takes money from you, then you can use the warranty to claim back the money you lost. ...


5

Yes, you'll need a code signing or Authenticode certificate. (It looks like not all CA vendors call it an Authenticode certificate; GoDaddy, for example, simply calls it a driver signing certificate.) As far as I know, with one major exception (see below), there is very little difference between CA vendors, and I'd generally just recommend using whoever's ...


4

A certificate signing request contains information about the distinguished name of the individual who generated it along with the public key. The standard form of the request that on sees is a Base64 encoded request that contains the above mentioned distinguished name, the public key and the method that was used to generate the public key. The RSA public ...


3

If you just want to be allowed to install a driver on a windows machine, your CA use shouldn't matter (unless the CA isn't trusted by Microsoft). However, only VeriSign certificates are supported as a means of identifying your organization to Microsoft for features like Windows Error Reporting and Windows Hardware Certification. E.g., the Manage Your ...


3

No, there's no personal information or information about your hardware configuration stored within the CSR (certificate signing request). The CSR is part of an asymmetric encryption key, ie. it is the public portion of a public and private key. Essentially, both keys are just a bunch of random* numbers that enable Public key encryption. Have a look at ...


3

Take a look at the SmartCard API for Java This specification describes the Java Smart Card I/O API defined by JSR 268. It defines a Java API for communication with Smart Cards using ISO/IEC 7816-4 APDUs. It thereby allows Java applications to interact with applications running on the Smart Card, to store and retrieve data on the card, etc. The API ...


2

In my experience, programming certifications are not interesting to companies whose product is software. Those companies are much more interested in general problem-solving ability than in deep knowledge of some specific technology. They expect developers to be able to learn specific technologies as needed.


1

Just from what I've seen with the software I distribute, a code signing certificate doesn't affect customer behavior much, particularly if they are downloading directly from your site and not from a 3rd party. The customer has purposesly gone to your site, possibly even purchased your softare - they aren't not going to install your software because of an ...


1

I could be wrong about this, but as far as I know without resorting to implementing crypto in JavaScript or using some manner of plugin you cannot do exactly what you are attempting. There is something close that is unpopular, but fairly well supported: Client Side Certificates The general idea is that the client has a certificate in their keychain and ...


1

I can think of an easy legitimate reason: suppose I write a program to do an offline version of the SSL Labs server test. A good test suite for that program would include various certificates with different problems and some configuration to use them for testing. E.g. it checks for the Debian weak key problem, so you'd want a certificate with a Debian weak ...



Only top voted, non community-wiki answers of a minimum length are eligible