Re: self-signed certs (was: Re: error from ISP when fetcmail runs)

Trent W. Buck <trentbuck@gmail.com> wrote:

Nitpick: you're talking about X.509, not TLS.

Even in X.509, there is provision for bridging certificates, cross-certificates, etc. I haven't investigated how these work; they aren't equivalent to a PGP-style web of trust, but I understand that CAs can certify each other. The farthest I have come along this road was to create my own CA and to issue certificates for my hosts.