Impressed: it has been years since I've been hacked this well :(
scott at cdroo.com
Fri Jun 15 06:23:39 CDT 2007
From: "David Bovill" <david at openpartnership.net>
> Your true identity revealed!
LOL! It's never been a secret... ;-)
> I'm researching into code signing at the moment, including Sun Java code
> signing, Microsoft Authenticode (ActiveX controls, executables,
> DLL files), and Netscape Object Signing (Mozilla XPI packages for Firefox
> and Thunderbird).
The code signing I'm referring to here is for Windows exe's, dll's and I
*think* ActiveX. I'm not aware of a way to do this on other OS' as it's has
a profit element in it (for MS, Verisgn etc) but I can certainly see it
happening for Apple if they wished to do it. *nix etc would be harder
without an authority that can be guaranteed. Presently a person buying a
certificate has to be verified by hand (business records etc) and the cert'
can be withdrawn if one is found to be in violation of the rules (virus,
spyware etc) causing the application not to run at all on any box running
Windows XP SP 2 or above.
> I can see from the PAD code signing documentation that it is mainly
> Windows oriented - though there is GLP C library? It would seem that
> you should be able to do this with standard nix tools or even the ssl
> exteranls of Rev - though I think they still don't reveal the SHA and
> other signature bits? Have you any other links?
Not at the second. But I'll ask in the ASP and get back to you.
> I took a look - any issues with people outside of the USA?
Well I'm in Australia if that's any guide... <g> But there are members from
the UK, the former USSR, China (very recently) etc. It's a non profit and
US based, but certainly cosmopolitan.
> What are the requirements to join - I only see an email on the sign up
None. You agree to be bound by the by-laws (legally drawn up in Austin
Texas) and to abide by the member ship rules (also legally drawn up). AISIP
is private and is therefore monitored by the owners (the Halls' bros) and
previously by my good friend Sue Pinchotta. Again it's US based but open to
all countries and again you agree to be bound by the rules and in this case
act according to the guidelines that Sue maintains. Arguing etc are not
allowed (a disagreement of course is another thing as long as it doesn't get
More information about the use-livecode