[1364] in IS Home Pages
New Certificate Expiration Page
daemon@ATHENA.MIT.EDU (Jeffrey I. Schiller)
Tue Jul 4 17:52:32 2000
Message-Id: <39625C99.7025E273@mit.edu>
Date: Tue, 04 Jul 2000 17:52:25 -0400
From: "Jeffrey I. Schiller" <jis@MIT.EDU>
Mime-Version: 1.0
To: is-home@MIT.EDU, Theresa M Regan <TREGAN@mitvma.mit.edu>,
Suzana Lisanti <lisanti@MIT.EDU>
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms48574994AE8B51CA71681E13"
This is a cryptographically signed message in MIME format.
--------------ms48574994AE8B51CA71681E13
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
I have a new version of http://web.mit.edu/is/help/cert/certsexp.html.
This version resides on https://nic.mit.edu/certexpire/ (note the
"https"). This version is similar to the original except that it tells
you when your certificate will expire, you don't have to wade through
the various security dialogs in Netscape.
Also note: I changed the advice on deleting certificates to say that
this is only necessary with browsers older then Netscape 4.5. This is
important advice as we do *not* want people to get into the habit (and
we need to break the habit if they are already in it) of deleting their
certificates when they obtain new ones or as a "try this to see if it
works" step.
I say this because I suspect that with Netscape as our new recommended
e-mail client (see IMAP e-mail project) people will want to use the
Secure e-mail (S/MIME) facilities that are built in. MIT Certificates
can support this use. HOWEVER if people do this and receive encrypted
e-mail, they will lose access to that e-mail if they delete the
certificate it was sent to.
Now it turns out there are a bunch of issues we would have to deal with
before we recommend S/MIME to people, however we should at least set the
groundwork by not recommending that people delete certificates at the
drop of a hat.
You cannot copy https://nic.mit.edu/certexpire/ and have it work because
it is an "active" page that depends on code running on NIC to do its
thing. However if you want me to make changes, all you need to do is
"Save As" the existing page, make the changes and e-mail me the new page
(or e-mail me a pointer to it) and I can put it on NIC.
-Jeff
--------------ms48574994AE8B51CA71681E13
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms48574994AE8B51CA71681E13--
