[149641] in North American Network Operators' Group
Re: PGP, S/MIME + SSL cross-reference (Was: Dear RIPE: Please don't
daemon@ATHENA.MIT.EDU (Ryan Malayter)
Fri Feb 10 14:12:05 2012
Date: Fri, 10 Feb 2012 11:11:18 -0800 (PST)
In-Reply-To: <20120210180106.GB80127@ussenterprise.ufp.org>
From: Ryan Malayter <malayter@gmail.com>
To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Feb 10, 12:01=A0pm, Leo Bicknell <bickn...@ufp.org> wrote:
> OSX at least has a central certificate store (Keychain), although
> it's not up to the tasks of the world I wish to have. =A0Other OS's
> provide no central store, so each application maintains their own
> key store.
Windows has had its own centralized certificate store and APIs since
NT 4.0's release in 1996.
Firefox and Java are the only mainstream software can think of on
Windows that insists on using their own certificate stores (really
just a "pile of world-readable files") instead of the built-in per-
machine+per-user certificate store on Windows.