Dr Stephen Henson <lists(_at_)drh-consultancy(_dot_)demon(_dot_)co(_dot_)uk>
writes:
The self signed root CA issue was worked around by disabling the signature
check on the root CA by default, since it is redundant.
What about catching accidental data corruption? It still acts as an integrity
check, even if it's not an authenticity check.
(I recently ran into a situation where mangled PEM-encoding had corrupted
portions of CA root certs, and in some cases only the sig check would have
caught it).
Peter.
_______________________________________________
smime mailing list
smime(_at_)ietf(_dot_)org
https://www.ietf.org/mailman/listinfo/smime