Re: Self-signed certificate behavior.

[Giuseppe Scrivano]

Karl Berry wrote:

> There are nontrivial costs involved with being a certificate authority.
> I doubt there will ever be a validated CA that issues certs for no money
> and that is included in the root certs of, say, Firefox.
> General: http://en.wikipedia.org/wiki/Certificate_authority#Providers
>
> Current root authorities in Firefox:
> http://www.mozilla.org/projects/security/certs/included/
>
> List of providers:
> http://www.dmoz.org/Computers/Security/Public_Key_Infrastructure/PKIX/Tools_and_Services/Third_Party_Certificate_Authorities//

In this list I can see there is already something similar:

http://www.cacert.org
"CAcert.org is a community driven, Certificate Authority that issues 
certificates to the public at large for free. "

So my idea wasn't completely unfeasible :)  Now the question is: should 
we accept it as a valid CA in GNU IceCat?

Regards,
Giuseppe