Impressed: it has been years since I've been hacked this well :(

[Scott Kane]

From: "David Bovill" <david at openpartnership.net>

> Your true identity revealed!

LOL!  It's never been a secret...  ;-)

> I'm researching into code signing at the moment, including Sun Java code 
> signing, Microsoft Authenticode (ActiveX controls, executables,
> DLL files), and Netscape Object Signing (Mozilla XPI packages for Firefox 
> and Thunderbird).

The code signing I'm referring to here is for Windows exe's, dll's and I 
*think* ActiveX.  I'm not aware of a way to do this on other OS' as it's has 
a profit element in it (for MS, Verisgn etc) but I can certainly see it 
happening for Apple if they wished to do it.  *nix etc would be harder 
without an authority that can be guaranteed.  Presently a person buying a 
certificate has to be verified by hand (business records etc) and the cert' 
can be withdrawn if one is found to be in violation of the rules (virus, 
spyware etc) causing the application not to run at all on any box running 
Windows XP SP 2 or above.

> I can see from the PAD code signing documentation that it is mainly 
> Windows oriented - though there is GLP C library? It would seem that
> you should be able to do this with standard nix tools or even the ssl 
> exteranls of Rev - though I think they still don't reveal the SHA and
> other signature bits? Have you any other links?

Not at the second.  But I'll ask in the ASP and get back to you.

> I took a look - any issues with people outside of the USA?

Well I'm in Australia if that's any guide... <g>  But there are members from 
the UK, the former USSR, China (very recently) etc.  It's a non profit and 
US based, but  certainly cosmopolitan.

> What are the requirements to join - I only see an email on the sign up 
> form?

None.  You agree to be bound by the by-laws (legally drawn up in Austin 
Texas) and to abide by the member ship rules (also legally drawn up).  AISIP 
is private and is therefore monitored by the owners (the Halls' bros) and 
previously by my good friend Sue Pinchotta.  Again it's US based but open to 
all countries and again you agree to be bound by the rules and in this case 
act according to the guidelines that Sue maintains.  Arguing etc are not 
allowed (a disagreement of course is another thing as long as it doesn't get 
to hot).

Scott Kane