From owner-ietf-ediint@mail.imc.org  Wed Sep 13 13:26:21 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA13332
	for <ediint-archive@odin.ietf.org>; Wed, 13 Sep 2000 13:26:20 -0400 (EDT)
Received: by ns.secondary.com (8.9.3/8.9.3) id JAA13625
	for ietf-ediint-bks; Wed, 13 Sep 2000 09:34:54 -0700 (PDT)
Received: from aol.com (host-00-20-78-cd-ca-69-nat.adsl.catt.com [63.105.254.111])
	by ns.secondary.com (8.9.3/8.9.3) with SMTP id JAA13617
	for <ietf-ediint@imc.org>; Wed, 13 Sep 2000 09:34:52 -0700 (PDT)
Date: Wed, 13 Sep 2000 09:34:52 -0700 (PDT)
Message-Id: <200009131634.JAA13617@ns.secondary.com>
To: ietf-ediint@imc.org
From: "Stephen Lee" <VideoRequest@aol.com>
X-Mailer: 6C5B2857.35F93A11.582ea6821d9574f23b6841dd82bac9b2
Subject: Stephen Lee  - Question
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>

Hello my name is Stephen Lee.  :o)
 
I ran accross your E-mail address on http://www.imc.org/ietf-ediint/archive1/0065.html (under e-mail+marketing+sales in altavista's search engine) and wanted to tell you that I use a software program that filters my email for me and also sends out personal emails to my customers all automatically while I am away from my desk.
 
PS - It even has an unlimited number of built in autoresponders, it can import orders into your database, and it even has a built in newsletter server as well which I use all of the time.  
 
Let me know if you are interested and I will send you the hyperlink to it where you can download it and try it out for yourself.  It has been the most useful tool to me and I hope it can help you out too!!
 
Sincerely,
Stephen Lee  :o)


From owner-ietf-ediint@mail.imc.org  Wed Sep 20 09:52:54 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id JAA23043
	for <ediint-archive@odin.ietf.org>; Wed, 20 Sep 2000 09:52:53 -0400 (EDT)
Received: (from majordomo@localhost)
	by ns.secondary.com (8.9.3/8.9.3) id FAA22958
	for ietf-ediint-bks; Wed, 20 Sep 2000 05:55:55 -0700 (PDT)
Received: from bdcsql1.al-rostamani.co.ae ([194.170.227.9])
	by ns.secondary.com (8.9.3/8.9.3) with SMTP id FAA22931
	for <ietf-ediint@imc.org>; Wed, 20 Sep 2000 05:54:44 -0700 (PDT)
Date: Wed, 20 Sep 2000 05:54:44 -0700 (PDT)
From: nile333@kadet.co.uk
Message-Id: <200009201254.FAA22931@ns.secondary.com>
Received: from SMTP agent by mail gateway 
 Wed, 20 Sep 2000 17:00:21 --400
Received: from firewall-in.al-rostamani.co.ae by bdcsql1.al-rostamani.co.ae with SMTP (Microsoft Exchange Internet Mail Service Version 5.0.1460.8)
	id TFDHQ4H6; Wed, 20 Sep 2000 15:48:00 +0400
Received: from SMTP agent by mail gateway 
 Wed, 20 Sep 2000 15:53:04 --400
To: nile333@kadet.co.uk
Subject: So, How in the heck have you been?
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>


So, How in the heck have you been?

Do you remember holding previous conversations regarding business and
money making opportunities? I did not send this to you in error!

You Said:

If only I could find an easier way to make a higher income!

and

If I had more money, I could spend more time with my Family, and less
time at work and I sure could use more money so I could pay off my
bills once and for all!

And

I would love to get involved in a business in which will generate money
while I am not at work (like a Gas Pump)!

Dear Friend,

There is a possibility that we haven’t met, but you were chosen by
someone to receive this E-Mail. Please, please, print this off and
read thoroughly. Be sure that you don’t miss any of the points
outlined.  Then put it down, and then read it again. I am sending
you a whole lot of information in which you might not understand
the first time you read it. If you don’t believe this  program
will work for you, send it to 10-20 of your closest friends
(in which you trust deeply),  and ask them what they think?
This really works! Have faith, don’t miss this opportunity,
get involved also, and it will work for you as it does for us!!!!

Due to the popularity of this letter on the Internet, A Major Nightly
News Program recently dedicated an entire show to the investigation of
the
program described below to see if it really can make people money.
The show also investigated whether or not the program was legal. Their
findings proved that there are absolutely no laws prohibiting the
participation in the program. This has helped to show people that this
is a simple, harmless and fun way to make extra money at home. The
results have been truly remarkable. So many people are participating
that those involved are doing much better than ever before. Since
everyone makes more as more people try it out, its been very exciting.

You will understand only if you get involved!
********** THE ENTIRE PLAN IS HERE BELOW **********
**** Print This Now For Future Reference ****

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
If you would like to make AT LEAST $50,000 in less than 90 days! If not,

forward this to someone who would like to make this kind of money.
It works (like designed) but only for those who follow it to the letter!

Please read this program THEN READ IT AGAIN!!
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

THIS IS A LEGITIMATE. LEGAL, MONEY MAKING OPPORTUNITY!! It does NOT
require you to come into contact with people or make or take any
telephone
calls. Just follow the instructions, and you will make money. This
simplified e-mail marketing program works perfectly 100% EVERY TIME!

E-mail is the sales tool of the future. Take advantage of this virtually

free method of advertising NOW!!! The longer you wait, the more people
will
be doing business using e-mail. Get your piece of this action!!!

Hello, My name is Johnathon Rourke, I’m from Rhode Island.  The enclosed

information is something I almost let slip through my fingers.
Fortunately, sometime later I re-read everything and gave some thought
and study to it. Two years ago, the corporation I worked for the past
twelve yearsdown-sized and my position was eliminated. After
unproductive
job interviews, I decided to open my own business. Over the past year,I
incurred many unforeseen financial problems. I owed my family, friends
and
creditors over$35,000. The economy was taking a toll on my business and
I
just could not seem to make ends meet. I had to refinance and borrow
against
my home to support my family and struggling business.

AT THAT MOMENT something significant happened in my life. I am writing
to share the experience I hopes that this could change your life
FOREVER.
FINANCIALLY$$$!!!

In mid December, I received this program in my e-mail. Six months prior
to
receiving this program I had been sending away for information on
various
business opportunities. All of the programs I received, in my
opinion,were
not cost effective. They were either toodifficult for me to comprehend
or
the initial investment was too muchfor me to risk to see if they would
work.
But as I was saying, in December of 1997 I received this program.I
didn’t
send for it, or ask for it, they just got my name off a mailing list.

THANK GOODNESS FOR THAT!!!

After reading it several times, to make sure I was reading it correctly.
I
couldn’t believe my eyes! Here was a MONEY MAKING MACHINE I could start
immediately without any debt. Like most of you I was still a little
skeptical and a little worried about the legalaspects of it all. So I
checked it out with the U.S. Post Office (1-800-725-2161 24-hrs)  and
they
confirmed that it is indeed legal ! After determining the program was
LEGAL
I decided WHY NOT!?!??

Initially I sent out 10,000 e-mails. It cost me about $15 for my time
on-line. The great thing about e-mail is that I don’t need any paper for

printing to send out the program, and because I also send the product
(reports) by e-mail, my only expense is my time. In less than one week,I
was
starting to receive orders for REPORT #1.

By January 13, I had received 26 orders for REPORT #1. Your goal is to
RECEIVE at least 20 ORDERS FOR REPORT #1 WITHIN 2 WEEKS. IF YOU DON’T
SEND OUT MORE PROGRAMS UNTIL YOU DO. My first step in making $50,000 in
90
days was done. By January 30, I had received 196 orders for REPORT #2.
Your
goal is to RECEIVE AT LEAST 100+ ORDERS FOR REPORT #2 WITHIN
2 WEEKS. IF NOT SEND OUT MORE PROGRAMS UNTIL YOU! DO. ONCE YOU HAVE
100 ORDERS, THE REST IS EASY, RELAX, YOU WILL MAKE YOUR $50,000 GOAL.

Well, I had 196 orders for REPORT #2. 96 more than I needed. So I
sat back and relaxed.

By March 1, of my e-mailing of 10,000, received $58,000 with more coming
in
every day. I paid off ALL my debts and bought a much need new car!
Please
take your time to read this plan, IT WILL CHANGE YOUR LIFE FOREVER$!!!
Remember, it won’t work if you don’t try it. This program does work, But
you
must follow it EXACTLY! Especially the rules of not trying to place your

name in a different place. It won’t work and you’ll lose out on a lot of

money! In order for this program to work, you must meet your goal of 20+

orders for REPORT #1, and 100+ orders for REPORT #2 and you will make
$50,000 or more in 90 days.

I AM LIVING PROOF THAT IT WORKS!!!

If you choose not to participate in this program, I am sorry. It really
is a great opportunity with little cost or risk to you.  If you choose
toparticipate, follow the program and you will be on your way to
financial security. If you are a fellow business owner and
are financial trouble like I was, or you want to start your own
business, consider this a sign. I DID! $$

Sincerely,
Johnathon Rourke

A PERSONAL NOTE FROM THE ORIGINATOR OF THIS PROGRAM: By the time you
have read the enclosed program and reports, you should have concluded
that
such a program, and one that is legal, cpuld not have been created by an

amateur. Let me tell you a little about myself. I had a profitable
business
for 10 years. Then in 1979 my business began falling off. I was doing
the
same things that were previously successful for me, but it wasn’t
working.
Finally, I figured it out. It wasn’t me, it was the economy. Inflation
and
recession had replaced the stable economy that had been with us since
1945.
I don’t have to tell you what happened to the unemployment rate because
many
of you know from first hand experience. There were more failures and
bankruptcies than ever before. The middle class was vanishing. Those who

knew what they were doing invested wisely and moved up. Those who did
not,
including those who never had anything to save or invest, were moving
down into the ranks of the poor. As the saying goes, THE RICH GET RICHER

ANDTHE POOR GET POORER.  The traditional methods of making money will
never
allow you to move up or get rich, inflation will see to that You have
just
received the rest of  your life, with NO RISK and JUST A LITTLE BIT OF
EFFORT. You can make more money in the next few months than you have
everimagined.I should also point out that I will not see a penny of this

money, nor anyone else who has provided a testimonial for this program.
I
retired from the program after sending thousands and thousands of
programs.
Follow the program EXACTLY AS INSTRUCTED. Do not change it in any way.
It
works exceedingly well as it is now. Remember to e-mail a copyof this
exciting report to everyone you can think of. One of the people you send

this to may send out 50,000 and your name will be on everyone of them!
REMEMBER though, ------ the MORE YOU SEND OUT, the more potential
customers
you will reach. So my friend, I have given you the ideas,  information,
materials and opportunity to become financially independent.

IT IS UP TO YOU!! NOW DO IT!!

BEFORE YOU delete this program from your in box, as I almost did, take a

little time to read it and REALLY THINK ABOUT IT. Get a pencil and
figure out what could happen when YOU participate. Figure out the worst
possible response and no matter how you calculate it, you will still
make a
lot of money! You will definitely get back what you invested. Any doubts
you
have will vanish when your first orders come in. $$$ IT WORKS!!! $$$

Jody Jacobs Richmond, VA.

HERE’S HOW THIS AMAZING PROGRAM WILL MAKE YOU THOUSANDS OF
DOLLARS$$$$!!!!

This method of raising capital REALLY WORKS 100% EVERY TIME. I am sure
that you could use up to $50,000 or more in the next 90 days. Before you
say
BULL, please read this program carefully. This is not a chain letter,but
a
perfectly legal money making business. As with all multi-level
businesses,
we build our business by recruiting new partners and selling our
products.
Every state in the USA allows you to recruit new multi-level business
partners, and we sell and deliver a product for EVERY dollar received.

YOUR ORDERS COME BY MAIL AND ARE FILLED BY E-MAIL, so you are not
involved in personal selling. You do it privately in your own home,
store or
office. This is the EASIEST marketing plan anywhere! It is simply order
filling by e-mail! The product is informational and instructional
material,
keys to the secrets for everyone on how to open the doors to the magic
world
of E-COMMERCE, the information highway, the wave of the future !

PLAN SUMMARY:

(1) You order the 4 reports listed below ($5 each) They come to you by
e-mail.

(2)  Save a copy of this entire letter and put your name after Report #1
and
move the other names down.

(3)  Via the internet, access Yahoo.com or any of the other major search

engines to locate hundreds of bulk e-mail service companies (search for
bulk
email) and have them send 25,000  50,000 emails for you about $49+.

(4)  Orders will come to you by postal mail simply e-mail them the
Report they ordered. Let me ask you  isn’t this about as easy as it
gets?

By the way there are over 50 MILLION e-mail address with millions more
joining the internet each year so don’t worry about running out or
saturation. People are used to seeing and hearing the same
advertisements every day on radio/TV. How many times have you received
the same pizza flyers on your door? Then one day you are hungry for
pizza
and order one. Same thing with this letter. I received this letter many
times  then one day I decided it was time to try it.

YOU CAN START TODAY UST DO THESE EASY STEPS: STEP #1 ORDER THE FOUR
REPORTS

Order the four reports shown on the list below (you can’t sell them if
you don’t order them).  For each report, send $5.00 CASH, the NAME &
NUMBER
OF THE REPORT YOU ARE ORDERING, YOUR E-MAIL ADDRESS, and YOUR NAME &
RETURN
ADDRESS (in case of a problem) to the person whose name appears on the
list
next to the report.MAKE SURE YOUR RETURN ADDRESS IS ON YOUR ENVELOPE IN
CASE OF ANY MAIL PROBLEMS! Within a few days you will receive, by e-mail

each of the four reports.Save them on your computer so you can send them
to
the 1,000’s of people who will  order them from you.

STEP #2. ADD YOUR MAILING ADDRESS TO THIS LETTER

a. Look below for the listing of the four reports.
b. After you’ve ordered the four reports, delete the name and address
under REPORT #4. This person has made it through the cycle.
c. Move the name and address under REPORT #3 down to REPORT #4.
d. Move the name and address under REPORT #2 down to REPORT #3.
e. Move the name and address under REPORT #1 down to REPORT #2.
f. Insert your name/address in the REPORT #1 position. Please make sure
you

COPY ALL INFORMATION, every name and address, ACCURATELY!

STEP #3. Take this entire letter, including the modified list of names,
and save it to your computer. Make NO changes to these instructions. Now
you
are ready to use this entire e-mail to send by e-mail to prospects.

Report #1 will tell you how to download bulk email software and email
address so you can send it out to thousands of people while you sleep!
Remember that 50,000+ new people are joining the internet every month!
Your cost to participate in this is practically nothing ( surely you can

afford $20 and initial bulk mailing cost). You obviously already have a
computer and an Internet connection and e-mail is FREE! There are two
primary methods of building your downline: METHOD #1: SENDING BULK
E-MAIL
let’s say that you decide to start small, just to see how it goes, and
we’ll
assume you and all those involved email out only 2,000 programs each.
Let’s
also assume that the mailing receives a 0.5% response. The response
could be
much better. Also, many people will email out thousands of thousands of
programs instead of 2,000 (Why stop at 2000?) But continuing with this
example, you send out only 2,000 programs. With a 0.5% response, that is

only 10 orders for REPORT #1. Those 10 people respond by sending out
2,000
programs each for a total of 20,000. Out of those 0.5%, 100 people
respond
and order REPORT #2.Those 100 mail out 2,000 programs each for a total
of
200,000. The 0.5% response to that is 1,000 orders for REPORT #3. Those
1,000 send out 2,000  programs each for a 2,000,000 total. The 0.5%
response
to that is 10,000 orders for REPORT #4. That’s 10,000 $5 bills for you.
CASH!!! Your total income in this example is $50 + $500 + $5000 +
$50,000
for a total of $55,550!!!

REMEMBER FRIEND, THIS IS ASSUMING 1,990 OUT OF THE 2,000 PEOPLE YOU MAIL
TO
WILL DO ABSOLUTELY NOTHING AND TRASH THIS PROGRAM! DARE TO THINK FOR A
MOMENT WHAT WOULD HAPPEN IF EVERYONE, OR HALF SENT OUT 100,000 PROGRAMS
INSTEAD OF 2,000. Believe me, many people will do just that, and more!

METHOD #2 PLACING FREE ADS ON THE INTERNET Advertising on the internet
is very, very inexpensive, and there are HUNDREDS of FREE places to
advertise. Let’s say you decide to start small to see how well it works.

Assume your goal is to get ONLY 10 people to participate on your first
level. (Placing a lot of FREE ads on the Internet will EASILY get a
larger
response). Also assume that everyone else in YOUR ORGANIZATION gets only
10
downline members. Look how this small number accumulates to achieve the
STAGGERING results below:

1St level  your first 10 send you $5........................$50
2nd level  10 members from those 10 ($5 x 100)............$500
3rd level  10 members from those 100 ($5 x 1,000)......$5,000
4th level 10 members from those 1,000 ($5 x 10,000)..$50,000
$$$$$$ THIS TOTALS
------------------------------------------------55,5550
$$$$$

AMAZING ISN’T IT Remember friends, this assumes that the people who
participate only recruit 10 people each. Think for a moment what would
happen if they got 20 people to participate! Most people get 100’s of
participants and many will continue to work this program, sending out
programs WITH YOUR NAME ON THEM for years! THINK ABOUT IT!
People are going to get emails about this plan from you or somebody else
and
many will work this plan  the question is Don’t you want your name to be
on
the emails they will send out?

*** DON’T MISS OUT !!!***
***JUST TRY IT ONCE !!!***
***SEE WHAT HAPPENS !!!***
***YOU'LL BE AMAZED !!!***

ALWAYS PROVIDE SAME DAY SERVICE ON ALL ORDERS! This will guarantee that
the e-mail THEY send out with YOUR name and address on it will be prompt

because they can’t advertise until they receive the report!

GET STARTED TODAY: PLACE YOUR ORDER FOR THE FOUR REPORTS NOW. Note:--
ALWAYS SEND $5 CASH (U.S. CURRENCY) FOR EACH REPORT. CHECKS NOT
ACCEPTED.
Make sure the cash is concealed by wrapping it in two sheets of paper.
On
one of those sheets write:

(a) the number & name of the report you are ordering
(b) your e-mail address, and
(c) your name & postal address.

REPORT #1b The Insider’s Guide to Advertising for Free on the Internet
ORDER REPORT #1 FROM:

NICK NICHOLAS
473 MICHIGAN ST
ST.PAUL, MN 55102

NOTE: I and every member below are dedicated at helping you with this
program so it will work for you also. TRY US!

REPORT #2 The Insider’s Guide to Sending Bulk E-Mail on the Internet
ORDER REPORT #2 FROM:

DIANE COLON
1811 TAMARIND AVE # 206
LOS ANGELES, CA. 90028

REPORT #3 The Secrets to Multilevel Marketing on the Internet
ORDER REPORT #3 FROM:

MELISSA HOGENMILLER
3709 MONHEIM ROAD
CONOVER, WI 54519

REPORT #4 How to become a Millionaire utilizing the Power of Multilevel
Marketing and the Internet
ORDER REPORT #4 FROM:

CATHY BARROW
10 SYCAMORE STREET
CONWAY, SC 29527

*************TIPS FOR SUCCESS***************
TREAT THIS AS YOUR BUSINESS! Be prompt, professional, and follow the
directions accurately.  Send for the four reports IMMEDIATELY so you
will have them when the orders start coming in because: When you
receive a $5 order you MUST send out the requested product/report.
It is required for this to be a legal business and they need the
reports to send out their letter (with your name on them).

--ALWAYS PROVIDE SAME-DAY SERVICE ON THE ORDERS YOU RECEIVE. Be
patient and persistent with this program- If you follow the
instructions exactly results WILL FOLLOW. $$$$

************ YOUR SUCCESS GUIDELINES ***************

Follow these guidelines to guarantee your success: If you don’t receive
20 orders for REPORT #1 within two weeks, continue advertising or
sending
e-mail until you do. Then a couple of weeks later you should receive at
least 100 orders for REPORT #2. If you don’t continue advertising or
sending
e-mail until you do. Once you have received 100 or more orders for
REPORT
#2, YOU CAN RELAX, because the system is already working for you, and
the
cash will continue to roll in! THIS IS IMPORTANT TO REMEMBER:  Every
time
your name is moved down on the list, you are placed in front of a
DIFFERENT
report. You can KEEP TRACK of your  PROGRESS by watching which report
people
are ordering from you. To generate more income, simply send another
batch of
e-mails or continue placing ads and start the whole process again! There
is
no limit to the income you will generate from this business! Before you
make
your decision as to whether or not you participate in this program.
Please
answer one question:

ARE YOU HAPPY WITH YOUR PRESENT INCOME OR JOB?

1. If the answer is no, then please look at the following facts about
this super simple MLM program: NO face to face selling, NO meetings, NO
inventory! NO Telephone calls, NO big cost to start! Nothing to learn,
No skills needed! (Surely you know how to send email?)

2. No equipment to buy you already have a computer and internet
connection so you have everything you need to fill orders!

3. You are selling a product which does NOT COST ANYTHING TO PRODUCE OR
SHIP! (Email copies of the reports are FREE!)

4. All of your customers pay you in CASH! This program will change your
LIFE  FOREEVER!! Look at the potential for you to be able to quit your
job and live a life of luxury you could only dream about! Imagine
getting out of debt and buying the car and home of your dreams and
being able to work a super-high paying leisurely easy business from
home!

$$$ FINALLY MAKE SOME DREAMS COME TRUE! $$$ ACT NOW!
Take your first step toward achieving financial independence.  Order
the reports and follow the program outlined above __ SUCCESS will be
your reward.

Thank you for your time and consideration. PLEASE NOT: If you need
help with starting a business, registering a business name, learning
now income tax is handled, etc., contact your local office of the
Small Business Administration  (A Federal Agency) 1-800-827-5722
for free help and answers to questions. Also the Internal Revenue
Service offers free help via telephone and free seminars about
business tax requirements. Your earnings are highly dependent on
your activities and advertising. The information contained on this
site and in the report constitutes no guarantees stated nor implied.
In the event that it is determined that this site or report
constitutes a guarantee of any kind, that guarantee is now void. The
earnings amounts listed on this site and in the report are estimates
only. If you have any questions of the legality of this program,
contact the Office of Associate Director for Marketing Practices,
Federal Trade Commission, Bureau of Consumer Protection in
Washington DC.

Under Bill s.1618 TITLE III passed by the 105th US Congress this
letter cannot be considered spam as long as the sender includes
contact information and a method of removal. This is a one time
e-mail transmission. No request for removal is necessary.





From owner-ietf-ediint@mail.imc.org  Thu Sep 28 17:27:37 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id RAA02739
	for <ediint-archive@odin.ietf.org>; Thu, 28 Sep 2000 17:27:37 -0400 (EDT)
Received: by ns.secondary.com (8.9.3/8.9.3) id NAA25614
	for ietf-ediint-bks; Thu, 28 Sep 2000 13:01:09 -0700 (PDT)
Received: from gbo126-n.gillette.com ([151.208.27.7])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id NAA25608
	for <ietf-ediint@imc.org>; Thu, 28 Sep 2000 13:01:07 -0700 (PDT)
From: Mark_Mueller@gillette.com
Subject: Certificates:  self-signed vs VeriSign
To: ietf-ediint@imc.org
Cc: Leo_Burstein@gillette.com, Robert_Mytkowicz@gillette.com
X-Mailer: Lotus Notes Release 5.0.2a (Intl) 23 November 1999
Message-ID: <OF96F9DD62.463FAD37-ON85256968.006DA206@gillette.com>
Date: Thu, 28 Sep 2000 16:04:19 -0400
X-MIMETrack: Serialize by Router on GBO126-N/GIL/bo/NA/Gillette(Release 5.0.2c (Intl)|2
 February 2000) at 09/28/2000 04:04:36 PM
MIME-Version: 1.0
Content-type: text/plain; charset=us-ascii
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>

Folks,

We're just getting started with EDIINT and we're trying to get a sense for
whether other
companies are using self-signed certificates or certificates from a CA such
as VeriSign.

What seems to be the trend out there?  Would people look askance at
self-signed certificates?

    Mark



From owner-ietf-ediint@mail.imc.org  Fri Sep 29 01:38:09 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id BAA15561
	for <ediint-archive@odin.ietf.org>; Fri, 29 Sep 2000 01:38:06 -0400 (EDT)
Received: by ns.secondary.com (8.9.3/8.9.3) id VAA06866
	for ietf-ediint-bks; Thu, 28 Sep 2000 21:52:51 -0700 (PDT)
Received: from bhpmel-ims04.corpmel.bhp.com.au (mel01.bhp.com.au [192.83.224.17])
	by ns.secondary.com (8.9.3/8.9.3) with SMTP id VAA06861
	for <ietf-ediint@imc.org>; Thu, 28 Sep 2000 21:52:48 -0700 (PDT)
Received: FROM bhpmel-ims04.corpmel.bhp.com.au BY bhpmel-ims04.corpmel.bhp.com.au ; Fri Sep 29 15:55:28 2000 +1100
Received: by bhpmel-ims04.corpmel.bhp.com.au with Internet Mail Service (5.5.2652.78)
	id <T5R3PP36>; Fri, 29 Sep 2000 15:55:28 +1100
Message-ID: <315EC1E2790FD111B05A00805F154A93071C4C34@itwol-msg02.itwol.bhp.com.au>
From: "Totman, Philip PL" <Totman.Philip.PL@bhp.com>
To: ietf-ediint@imc.org,
        "'Mark_Mueller@gillette.com'"
	 <Mark_Mueller@gillette.com>
Cc: Leo_Burstein@gillette.com, Robert_Mytkowicz@gillette.com
Subject: RE: Certificates:  self-signed vs VeriSign
Date: Fri, 29 Sep 2000 15:54:57 +1100
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2652.78)
Content-Type: text/plain
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>

Mark,
BHP Steel Australia are about to embark on rolling out an EDIINT compliant product to its major trading partners. BHP is commited to Sterling Commerce solutions (Gentran) and have chosen the Internet Data Exchange (IDX) product that has been sourced from Cyclone.

We are planning to generate self-signed certificates and we expect that most trading partners will be happy to follow suit until this type of EDI trading develops and requires external certificate management. 

regards

Philip Totman
__________________________________________________
CSC Technology Services (formerly BHP IT)
CSC
151 King Street, Warrawong NSW 2502 
Ph: (02) 4275 5436   Email: totman.philip.pl@bhp.com.au



> ----------
> From: 	Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com]
> Sent: 	Friday, 29 September 2000 7:04
> To: 	ietf-ediint@imc.org
> Cc: 	Leo_Burstein@gillette.com; Robert_Mytkowicz@gillette.com
> Subject: 	Certificates:  self-signed vs VeriSign
> 
> Folks,
> 
> We're just getting started with EDIINT and we're trying to get a sense for
> whether other
> companies are using self-signed certificates or certificates from a CA such
> as VeriSign.
> 
> What seems to be the trend out there?  Would people look askance at
> self-signed certificates?
> 
>     Mark
> 
> 
EOM 

NOTICE - This message contains information intended only for the use of the addressee named above.  It may also be confidential and/or privileged.  If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it.  If you have received this message in error please notify postmaster@bhp.com.


From owner-ietf-ediint@mail.imc.org  Fri Sep 29 10:27:59 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id KAA00595
	for <ediint-archive@odin.ietf.org>; Fri, 29 Sep 2000 10:27:58 -0400 (EDT)
Received: (from majordomo@localhost)
	by ns.secondary.com (8.9.3/8.9.3) id GAA24471
	for ietf-ediint-bks; Fri, 29 Sep 2000 06:30:11 -0700 (PDT)
Received: from infobro.com (InfoBro@black.infobro.com [63.71.25.39])
	by ns.secondary.com (8.9.3/8.9.3) with SMTP id GAA24467
	for <ietf-ediint@imc.org>; Fri, 29 Sep 2000 06:30:09 -0700 (PDT)
Received: from red (unverified [205.161.100.60]) by infobro.com
 (EMWAC SMTPRS 0.83) with SMTP id <B0001073350@infobro.com>;
 Fri, 29 Sep 2000 09:28:26 -0400
Received: by localhost with Microsoft MAPI; Fri, 29 Sep 2000 09:28:24 -0400
Message-ID: <01C029F7.9D993BA0.eric@infobro.com>
From: "Eric D. Williams" <eric@infobro.com>
To: "ietf-ediint@imc.org" <ietf-ediint@imc.org>
Cc: "'Totman, Philip PL'" <Totman.Philip.PL@bhp.com>
Subject: RE: Certificates:  self-signed vs VeriSign
Date: Fri, 29 Sep 2000 09:24:56 -0400
Organization: Information Brokers, Inc.
X-Mailer: Microsoft Internet E-mail/MAPI - 8.0.0.4211
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello all,
I agree with Philip, however the use of self-signed will (in the short term) be 
limited to those "trading partners" who choose to operate in that modality.  I 
believe most will be motivated as EDIINT moves forward to choose externally 
signed certs.  I am sure the current CA's will follow these developments 
closely and move quickly and deploy services in that space.

- From that prospective, however, it is very important to establish "good 
practices" for using self-signed certificates NOW, regardless of the 
marketplace developments.  I would be interested in some discussion on the 
parameters (read legal framework) trading partners will establish for that type 
of activity, this will at least give us some practices to draw from concerning 
self-signing and authenticity.

Eric Williams, Pres.
Information Brokers, Inc.    Phone: +1 202.889.4395
http://www.infobro.com/        Fax: +1 202.889.4396
              mailto:eric@infobro.com
           For More Info: info@infobro.com
                    PGP Public Key
   http://new.infobro.com/KeyServ/EricDWilliams.asc
Finger Print: 1055 8AED 9783 2378 73EF  7B19 0544 A590 FF65 B789


On Friday, September 29, 2000 12:55 AM, Totman, Philip PL 
[SMTP:Totman.Philip.PL@bhp.com] wrote:
> Mark,
> BHP Steel Australia are about to embark on rolling out an EDIINT compliant
> product to its major trading partners. BHP is commited to Sterling Commerce
> solutions (Gentran) and have chosen the Internet Data Exchange (IDX) product
> that has been sourced from Cyclone.
>
> We are planning to generate self-signed certificates and we expect that most
> trading partners will be happy to follow suit until this type of EDI trading
> develops and requires external certificate management.
>
> regards
>
> Philip Totman
> __________________________________________________
> CSC Technology Services (formerly BHP IT)
> CSC
> 151 King Street, Warrawong NSW 2502
> Ph: (02) 4275 5436   Email: totman.philip.pl@bhp.com.au
>
>
>
> > ----------
> > From: 	Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com]
> > Sent: 	Friday, 29 September 2000 7:04
> > To: 	ietf-ediint@imc.org
> > Cc: 	Leo_Burstein@gillette.com; Robert_Mytkowicz@gillette.com
> > Subject: 	Certificates:  self-signed vs VeriSign
> >
> > Folks,
> >
> > We're just getting started with EDIINT and we're trying to get a sense for
> > whether other
> > companies are using self-signed certificates or certificates from a CA such
> > as VeriSign.
> >
> > What seems to be the trend out there?  Would people look askance at
> > self-signed certificates?
> >
> >     Mark
> >
> >
> EOM
>
> NOTICE - This message contains information intended only for the use of the
> addressee named above.  It may also be confidential and/or privileged.  If
> you are not the intended recipient of this message you are hereby notified
> that you must not disseminate, copy or take any action in reliance on it.  If
> you have received this message in error please notify postmaster@bhp.com.
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBOdSYKAVEpZD/ZbeJEQJCBQCgrpdp65PmqxAlrZeFeWqK+jy4SEcAn1ev
4P3ZmJjGP9piZRpZnUXsOro3
=BrJV
-----END PGP SIGNATURE-----



From owner-ietf-ediint@mail.imc.org  Fri Sep 29 13:02:20 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id NAA03113
	for <ediint-archive@odin.ietf.org>; Fri, 29 Sep 2000 13:02:20 -0400 (EDT)
Received: (from majordomo@localhost)
	by ns.secondary.com (8.9.3/8.9.3) id IAA01227
	for ietf-ediint-bks; Fri, 29 Sep 2000 08:48:53 -0700 (PDT)
Received: from mail1.csx.com (proxy.csx.com [216.231.208.128])
	by ns.secondary.com (8.9.3/8.9.3) with SMTP id IAA01223
	for <ietf-ediint@imc.org>; Fri, 29 Sep 2000 08:48:52 -0700 (PDT)
Received: from 172.20.8.78 by mail1.csx.com (InterScan E-Mail VirusWall NT); Fri, 29 Sep 2000 11:15:19 -0400 (Eastern Daylight Time)
Received: by tjax2045exch-bk.bkup.csx.com with Internet Mail Service (5.5.2650.21)
	id <THBSNCKB>; Fri, 29 Sep 2000 11:17:14 -0400
Message-ID: <231F4FCC6CFCD311B2DC00508B651738D616A5@tjax2222exch.csxt.csx.com>
From: "Briley, Robert" <Robert_Briley@Bridge-Point.com>
To: ietf-ediint@imc.org
Subject: RE: Certificates:  self-signed vs VeriSign
Date: Fri, 29 Sep 2000 11:19:44 -0400
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>

As we start to pole our trading partners on their certificate preference,
the mix is about split.  However, when we ask them the reason behind their
preference, they don't usually have an explanation other than "well that
just seemed to be the best way".

Rob

Robert Briley
Senior Network Engineer
BridgePoint, Inc.
robert_briley@bridge-point.com

> -----Original Message-----
> From:	Eric D. Williams [SMTP:eric@infobro.com]
> Sent:	Friday, September 29, 2000 9:25 AM
> To:	ietf-ediint@imc.org
> Cc:	'Totman, Philip PL'
> Subject:	RE: Certificates:  self-signed vs VeriSign
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hello all,
> I agree with Philip, however the use of self-signed will (in the short
> term) be 
> limited to those "trading partners" who choose to operate in that
> modality.  I 
> believe most will be motivated as EDIINT moves forward to choose
> externally 
> signed certs.  I am sure the current CA's will follow these developments 
> closely and move quickly and deploy services in that space.
> 
> - From that prospective, however, it is very important to establish "good 
> practices" for using self-signed certificates NOW, regardless of the 
> marketplace developments.  I would be interested in some discussion on the
> 
> parameters (read legal framework) trading partners will establish for that
> type 
> of activity, this will at least give us some practices to draw from
> concerning 
> self-signing and authenticity.
> 
> Eric Williams, Pres.
> Information Brokers, Inc.    Phone: +1 202.889.4395
> http://www.infobro.com/        Fax: +1 202.889.4396
>               mailto:eric@infobro.com
>            For More Info: info@infobro.com
>                     PGP Public Key
>    http://new.infobro.com/KeyServ/EricDWilliams.asc
> Finger Print: 1055 8AED 9783 2378 73EF  7B19 0544 A590 FF65 B789
> 
> 
> On Friday, September 29, 2000 12:55 AM, Totman, Philip PL 
> [SMTP:Totman.Philip.PL@bhp.com] wrote:
> > Mark,
> > BHP Steel Australia are about to embark on rolling out an EDIINT
> compliant
> > product to its major trading partners. BHP is commited to Sterling
> Commerce
> > solutions (Gentran) and have chosen the Internet Data Exchange (IDX)
> product
> > that has been sourced from Cyclone.
> >
> > We are planning to generate self-signed certificates and we expect that
> most
> > trading partners will be happy to follow suit until this type of EDI
> trading
> > develops and requires external certificate management.
> >
> > regards
> >
> > Philip Totman
> > __________________________________________________
> > CSC Technology Services (formerly BHP IT)
> > CSC
> > 151 King Street, Warrawong NSW 2502
> > Ph: (02) 4275 5436   Email: totman.philip.pl@bhp.com.au
> >
> >
> >
> > > ----------
> > > From: 	Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com]
> > > Sent: 	Friday, 29 September 2000 7:04
> > > To: 	ietf-ediint@imc.org
> > > Cc: 	Leo_Burstein@gillette.com; Robert_Mytkowicz@gillette.com
> > > Subject: 	Certificates:  self-signed vs VeriSign
> > >
> > > Folks,
> > >
> > > We're just getting started with EDIINT and we're trying to get a sense
> for
> > > whether other
> > > companies are using self-signed certificates or certificates from a CA
> such
> > > as VeriSign.
> > >
> > > What seems to be the trend out there?  Would people look askance at
> > > self-signed certificates?
> > >
> > >     Mark
> > >
> > >
> > EOM
> >
> > NOTICE - This message contains information intended only for the use of
> the
> > addressee named above.  It may also be confidential and/or privileged.
> If
> > you are not the intended recipient of this message you are hereby
> notified
> > that you must not disseminate, copy or take any action in reliance on
> it.  If
> > you have received this message in error please notify
> postmaster@bhp.com.
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 6.5.8
> 
> iQA/AwUBOdSYKAVEpZD/ZbeJEQJCBQCgrpdp65PmqxAlrZeFeWqK+jy4SEcAn1ev
> 4P3ZmJjGP9piZRpZnUXsOro3
> =BrJV
> -----END PGP SIGNATURE-----


From owner-ietf-ediint@mail.imc.org  Sat Sep 30 20:15:36 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id UAA02311
	for <ediint-archive@odin.ietf.org>; Sat, 30 Sep 2000 20:15:35 -0400 (EDT)
Received: (from majordomo@localhost)
	by ns.secondary.com (8.9.3/8.9.3) id QAA14395
	for ietf-ediint-bks; Sat, 30 Sep 2000 16:33:53 -0700 (PDT)
Received: from SCTMAIL01.Vstore.com (mail.vstore.com [63.67.128.133])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id QAA14391
	for <ietf-ediint@imc.org>; Sat, 30 Sep 2000 16:33:52 -0700 (PDT)
Received: by SCTMAIL01.Vstore.com with Internet Mail Service (5.5.2650.21)
	id <T7JZT5HZ>; Sat, 30 Sep 2000 16:36:52 -0700
Message-ID: <7D9ADF294A9D1E4B82F9C4A7125B156FACFB3F@SCTMAIL01.Vstore.com>
From: Shan Harter <sharter@vcommerce.com>
To: "'Briley, Robert'" <Robert_Briley@Bridge-Point.com>, ietf-ediint@imc.org
Subject: RE: Certificates:  self-signed vs VeriSign
Date: Sat, 30 Sep 2000 16:36:51 -0700
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C02B37.4ED82E40"
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_001_01C02B37.4ED82E40
Content-Type: text/plain;
	charset="iso-8859-1"

Does it really matter if its VeriSign or by Cyclone, or IDX or ECXpert,
Priminos/Templar. As long at the trust relationship between the two parties has
been agreed upon? 

Vcommerce will probably use IDX's generated certificates (AKA Cyclone).

Shan

-----Original Message-----
From: Briley, Robert [mailto:Robert_Briley@Bridge-Point.com]
Sent: Friday, September 29, 2000 8:20 AM
To: ietf-ediint@imc.org
Subject: RE: Certificates: self-signed vs VeriSign


As we start to pole our trading partners on their certificate preference,
the mix is about split.  However, when we ask them the reason behind their
preference, they don't usually have an explanation other than "well that
just seemed to be the best way".

Rob

Robert Briley
Senior Network Engineer
BridgePoint, Inc.
robert_briley@bridge-point.com

> -----Original Message-----
> From:	Eric D. Williams [SMTP:eric@infobro.com]
> Sent:	Friday, September 29, 2000 9:25 AM
> To:	ietf-ediint@imc.org
> Cc:	'Totman, Philip PL'
> Subject:	RE: Certificates:  self-signed vs VeriSign
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hello all,
> I agree with Philip, however the use of self-signed will (in the short
> term) be 
> limited to those "trading partners" who choose to operate in that
> modality.  I 
> believe most will be motivated as EDIINT moves forward to choose
> externally 
> signed certs.  I am sure the current CA's will follow these developments 
> closely and move quickly and deploy services in that space.
> 
> - From that prospective, however, it is very important to establish "good 
> practices" for using self-signed certificates NOW, regardless of the 
> marketplace developments.  I would be interested in some discussion on the
> 
> parameters (read legal framework) trading partners will establish for that
> type 
> of activity, this will at least give us some practices to draw from
> concerning 
> self-signing and authenticity.
> 
> Eric Williams, Pres.
> Information Brokers, Inc.    Phone: +1 202.889.4395
> http://www.infobro.com/        Fax: +1 202.889.4396
>               mailto:eric@infobro.com
>            For More Info: info@infobro.com
>                     PGP Public Key
>    http://new.infobro.com/KeyServ/EricDWilliams.asc
> Finger Print: 1055 8AED 9783 2378 73EF  7B19 0544 A590 FF65 B789
> 
> 
> On Friday, September 29, 2000 12:55 AM, Totman, Philip PL 
> [SMTP:Totman.Philip.PL@bhp.com] wrote:
> > Mark,
> > BHP Steel Australia are about to embark on rolling out an EDIINT
> compliant
> > product to its major trading partners. BHP is commited to Sterling
> Commerce
> > solutions (Gentran) and have chosen the Internet Data Exchange (IDX)
> product
> > that has been sourced from Cyclone.
> >
> > We are planning to generate self-signed certificates and we expect that
> most
> > trading partners will be happy to follow suit until this type of EDI
> trading
> > develops and requires external certificate management.
> >
> > regards
> >
> > Philip Totman
> > __________________________________________________
> > CSC Technology Services (formerly BHP IT)
> > CSC
> > 151 King Street, Warrawong NSW 2502
> > Ph: (02) 4275 5436   Email: totman.philip.pl@bhp.com.au
> >
> >
> >
> > > ----------
> > > From: 	Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com]
> > > Sent: 	Friday, 29 September 2000 7:04
> > > To: 	ietf-ediint@imc.org
> > > Cc: 	Leo_Burstein@gillette.com; Robert_Mytkowicz@gillette.com
> > > Subject: 	Certificates:  self-signed vs VeriSign
> > >
> > > Folks,
> > >
> > > We're just getting started with EDIINT and we're trying to get a sense
> for
> > > whether other
> > > companies are using self-signed certificates or certificates from a CA
> such
> > > as VeriSign.
> > >
> > > What seems to be the trend out there?  Would people look askance at
> > > self-signed certificates?
> > >
> > >     Mark
> > >
> > >
> > EOM
> >
> > NOTICE - This message contains information intended only for the use of
> the
> > addressee named above.  It may also be confidential and/or privileged.
> If
> > you are not the intended recipient of this message you are hereby
> notified
> > that you must not disseminate, copy or take any action in reliance on
> it.  If
> > you have received this message in error please notify
> postmaster@bhp.com.
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 6.5.8
> 
> iQA/AwUBOdSYKAVEpZD/ZbeJEQJCBQCgrpdp65PmqxAlrZeFeWqK+jy4SEcAn1ev
> 4P3ZmJjGP9piZRpZnUXsOro3
> =BrJV
> -----END PGP SIGNATURE-----

------_=_NextPart_001_01C02B37.4ED82E40
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2652.35">
<TITLE>RE: Certificates:  self-signed vs VeriSign</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=3D2>Does it really matter if its VeriSign or by Cyclone, =
or IDX or ECXpert, Priminos/Templar. As long at the trust relationship =
between the two parties has been agreed upon? </FONT></P>

<P><FONT SIZE=3D2>Vcommerce will probably use IDX's generated =
certificates (AKA Cyclone).</FONT>
</P>

<P><FONT SIZE=3D2>Shan</FONT>
</P>

<P><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: Briley, Robert [<A =
HREF=3D"mailto:Robert_Briley@Bridge-Point.com">mailto:Robert_Briley@Brid=
ge-Point.com</A>]</FONT>
<BR><FONT SIZE=3D2>Sent: Friday, September 29, 2000 8:20 AM</FONT>
<BR><FONT SIZE=3D2>To: ietf-ediint@imc.org</FONT>
<BR><FONT SIZE=3D2>Subject: RE: Certificates: self-signed vs =
VeriSign</FONT>
</P>
<BR>

<P><FONT SIZE=3D2>As we start to pole our trading partners on their =
certificate preference,</FONT>
<BR><FONT SIZE=3D2>the mix is about split.&nbsp; However, when we ask =
them the reason behind their</FONT>
<BR><FONT SIZE=3D2>preference, they don't usually have an explanation =
other than &quot;well that</FONT>
<BR><FONT SIZE=3D2>just seemed to be the best way&quot;.</FONT>
</P>

<P><FONT SIZE=3D2>Rob</FONT>
</P>

<P><FONT SIZE=3D2>Robert Briley</FONT>
<BR><FONT SIZE=3D2>Senior Network Engineer</FONT>
<BR><FONT SIZE=3D2>BridgePoint, Inc.</FONT>
<BR><FONT SIZE=3D2>robert_briley@bridge-point.com</FONT>
</P>

<P><FONT SIZE=3D2>&gt; -----Original Message-----</FONT>
<BR><FONT SIZE=3D2>&gt; From: Eric D. Williams =
[SMTP:eric@infobro.com]</FONT>
<BR><FONT SIZE=3D2>&gt; Sent: Friday, September 29, 2000 9:25 AM</FONT>
<BR><FONT SIZE=3D2>&gt; To:&nbsp;&nbsp; ietf-ediint@imc.org</FONT>
<BR><FONT SIZE=3D2>&gt; Cc:&nbsp;&nbsp; 'Totman, Philip PL'</FONT>
<BR><FONT SIZE=3D2>&gt; Subject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RE: =
Certificates:&nbsp; self-signed vs VeriSign</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; -----BEGIN PGP SIGNED MESSAGE-----</FONT>
<BR><FONT SIZE=3D2>&gt; Hash: SHA1</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; Hello all,</FONT>
<BR><FONT SIZE=3D2>&gt; I agree with Philip, however the use of =
self-signed will (in the short</FONT>
<BR><FONT SIZE=3D2>&gt; term) be </FONT>
<BR><FONT SIZE=3D2>&gt; limited to those &quot;trading partners&quot; =
who choose to operate in that</FONT>
<BR><FONT SIZE=3D2>&gt; modality.&nbsp; I </FONT>
<BR><FONT SIZE=3D2>&gt; believe most will be motivated as EDIINT moves =
forward to choose</FONT>
<BR><FONT SIZE=3D2>&gt; externally </FONT>
<BR><FONT SIZE=3D2>&gt; signed certs.&nbsp; I am sure the current CA's =
will follow these developments </FONT>
<BR><FONT SIZE=3D2>&gt; closely and move quickly and deploy services in =
that space.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; - From that prospective, however, it is very =
important to establish &quot;good </FONT>
<BR><FONT SIZE=3D2>&gt; practices&quot; for using self-signed =
certificates NOW, regardless of the </FONT>
<BR><FONT SIZE=3D2>&gt; marketplace developments.&nbsp; I would be =
interested in some discussion on the</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; parameters (read legal framework) trading =
partners will establish for that</FONT>
<BR><FONT SIZE=3D2>&gt; type </FONT>
<BR><FONT SIZE=3D2>&gt; of activity, this will at least give us some =
practices to draw from</FONT>
<BR><FONT SIZE=3D2>&gt; concerning </FONT>
<BR><FONT SIZE=3D2>&gt; self-signing and authenticity.</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; Eric Williams, Pres.</FONT>
<BR><FONT SIZE=3D2>&gt; Information Brokers, Inc.&nbsp;&nbsp;&nbsp; =
Phone: +1 202.889.4395</FONT>
<BR><FONT SIZE=3D2>&gt; <A HREF=3D"http://www.infobro.com/" =
TARGET=3D"_blank">http://www.infobro.com/</A>&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp;&nbsp;&nbsp; Fax: +1 202.889.4396</FONT>
<BR><FONT =
SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp; <A =
HREF=3D"mailto:eric@infobro.com">mailto:eric@infobro.com</A></FONT>
<BR><FONT =
SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp; For More Info: info@infobro.com</FONT>
<BR><FONT =
SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; PGP =
Public Key</FONT>
<BR><FONT SIZE=3D2>&gt;&nbsp;&nbsp;&nbsp; <A =
HREF=3D"http://new.infobro.com/KeyServ/EricDWilliams.asc" =
TARGET=3D"_blank">http://new.infobro.com/KeyServ/EricDWilliams.asc</A></=
FONT>
<BR><FONT SIZE=3D2>&gt; Finger Print: 1055 8AED 9783 2378 73EF&nbsp; =
7B19 0544 A590 FF65 B789</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; On Friday, September 29, 2000 12:55 AM, Totman, =
Philip PL </FONT>
<BR><FONT SIZE=3D2>&gt; [SMTP:Totman.Philip.PL@bhp.com] wrote:</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; Mark,</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; BHP Steel Australia are about to embark on =
rolling out an EDIINT</FONT>
<BR><FONT SIZE=3D2>&gt; compliant</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; product to its major trading partners. BHP =
is commited to Sterling</FONT>
<BR><FONT SIZE=3D2>&gt; Commerce</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; solutions (Gentran) and have chosen the =
Internet Data Exchange (IDX)</FONT>
<BR><FONT SIZE=3D2>&gt; product</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; that has been sourced from Cyclone.</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; We are planning to generate self-signed =
certificates and we expect that</FONT>
<BR><FONT SIZE=3D2>&gt; most</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; trading partners will be happy to follow =
suit until this type of EDI</FONT>
<BR><FONT SIZE=3D2>&gt; trading</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; develops and requires external certificate =
management.</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; regards</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; Philip Totman</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; =
__________________________________________________</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; CSC Technology Services (formerly BHP =
IT)</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; CSC</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; 151 King Street, Warrawong NSW 2502</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; Ph: (02) 4275 5436&nbsp;&nbsp; Email: =
totman.philip.pl@bhp.com.au</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; ----------</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; From: &nbsp;&nbsp;&nbsp; =
Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com]</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; Sent: &nbsp;&nbsp;&nbsp; Friday, 29 =
September 2000 7:04</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; To: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
ietf-ediint@imc.org</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; Cc: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
Leo_Burstein@gillette.com; Robert_Mytkowicz@gillette.com</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; Subject:&nbsp; Certificates:&nbsp; =
self-signed vs VeriSign</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; Folks,</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; We're just getting started with =
EDIINT and we're trying to get a sense</FONT>
<BR><FONT SIZE=3D2>&gt; for</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; whether other</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; companies are using self-signed =
certificates or certificates from a CA</FONT>
<BR><FONT SIZE=3D2>&gt; such</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; as VeriSign.</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; What seems to be the trend out =
there?&nbsp; Would people look askance at</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt; self-signed certificates?</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt;&nbsp;&nbsp;&nbsp;&nbsp; Mark</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; EOM</FONT>
<BR><FONT SIZE=3D2>&gt; &gt;</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; NOTICE - This message contains information =
intended only for the use of</FONT>
<BR><FONT SIZE=3D2>&gt; the</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; addressee named above.&nbsp; It may also =
be confidential and/or privileged.</FONT>
<BR><FONT SIZE=3D2>&gt; If</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; you are not the intended recipient of this =
message you are hereby</FONT>
<BR><FONT SIZE=3D2>&gt; notified</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; that you must not disseminate, copy or =
take any action in reliance on</FONT>
<BR><FONT SIZE=3D2>&gt; it.&nbsp; If</FONT>
<BR><FONT SIZE=3D2>&gt; &gt; you have received this message in error =
please notify</FONT>
<BR><FONT SIZE=3D2>&gt; postmaster@bhp.com.</FONT>
<BR><FONT SIZE=3D2>&gt; -----BEGIN PGP SIGNATURE-----</FONT>
<BR><FONT SIZE=3D2>&gt; Version: PGP 6.5.8</FONT>
<BR><FONT SIZE=3D2>&gt; </FONT>
<BR><FONT SIZE=3D2>&gt; =
iQA/AwUBOdSYKAVEpZD/ZbeJEQJCBQCgrpdp65PmqxAlrZeFeWqK+jy4SEcAn1ev</FONT>
<BR><FONT SIZE=3D2>&gt; 4P3ZmJjGP9piZRpZnUXsOro3</FONT>
<BR><FONT SIZE=3D2>&gt; =3DBrJV</FONT>
<BR><FONT SIZE=3D2>&gt; -----END PGP SIGNATURE-----</FONT>
</P>

</BODY>
</HTML>
------_=_NextPart_001_01C02B37.4ED82E40--


From owner-ietf-ediint@mail.imc.org  Sat Sep 30 21:25:47 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id VAA02741
	for <ediint-archive@odin.ietf.org>; Sat, 30 Sep 2000 21:25:46 -0400 (EDT)
Received: (from majordomo@localhost)
	by ns.secondary.com (8.9.3/8.9.3) id RAA16592
	for ietf-ediint-bks; Sat, 30 Sep 2000 17:46:55 -0700 (PDT)
Received: from smtp.atl.mediaone.net (atlasmtp.atl.mediaone.net [24.92.1.152])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id RAA16587
	for <ietf-ediint@imc.org>; Sat, 30 Sep 2000 17:46:53 -0700 (PDT)
Received: from cwilson (rr-165-112-74.atl.mediaone.net [24.165.112.74])
	by smtp.atl.mediaone.net (8.8.7/8.8.7) with SMTP id UAA26508;
	Sat, 30 Sep 2000 20:50:15 -0400 (EDT)
Message-ID: <000901c02b41$7afddce0$4a70a518@atl.mediaone.net>
From: "Craig Wilson" <cwilson@transettlements.com>
To: "Shan Harter" <sharter@vcommerce.com>,
        "'Briley, Robert'" <Robert_Briley@Bridge-Point.com>,
        <ietf-ediint@imc.org>
References: <7D9ADF294A9D1E4B82F9C4A7125B156FACFB3F@SCTMAIL01.Vstore.com>
Subject: Re: Certificates:  self-signed vs VeriSign
Date: Sat, 30 Sep 2000 20:49:28 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0006_01C02B1F.ECB8F9E0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>

This is a multi-part message in MIME format.

------=_NextPart_000_0006_01C02B1F.ECB8F9E0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

RE: Certificates: self-signed vs VeriSignGood choice.  Works well for =
us.  Comes with a freely distributable client piece for those pesky SME =
situations.

Craig.
  ----- Original Message -----=20
  From: Shan Harter=20
  To: 'Briley, Robert' ; ietf-ediint@imc.org=20
  Sent: Saturday, September 30, 2000 7:36 PM
  Subject: RE: Certificates: self-signed vs VeriSign


  Does it really matter if its VeriSign or by Cyclone, or IDX or =
ECXpert, Priminos/Templar. As long at the trust relationship between the =
two parties has been agreed upon?=20

  Vcommerce will probably use IDX's generated certificates (AKA =
Cyclone).=20

  Shan=20

  -----Original Message-----=20
  From: Briley, Robert [mailto:Robert_Briley@Bridge-Point.com]=20
  Sent: Friday, September 29, 2000 8:20 AM=20
  To: ietf-ediint@imc.org=20
  Subject: RE: Certificates: self-signed vs VeriSign=20



  As we start to pole our trading partners on their certificate =
preference,=20
  the mix is about split.  However, when we ask them the reason behind =
their=20
  preference, they don't usually have an explanation other than "well =
that=20
  just seemed to be the best way".=20

  Rob=20

  Robert Briley=20
  Senior Network Engineer=20
  BridgePoint, Inc.=20
  robert_briley@bridge-point.com=20

  > -----Original Message-----=20
  > From: Eric D. Williams [SMTP:eric@infobro.com]=20
  > Sent: Friday, September 29, 2000 9:25 AM=20
  > To:   ietf-ediint@imc.org=20
  > Cc:   'Totman, Philip PL'=20
  > Subject:      RE: Certificates:  self-signed vs VeriSign=20
  >=20
  > -----BEGIN PGP SIGNED MESSAGE-----=20
  > Hash: SHA1=20
  >=20
  > Hello all,=20
  > I agree with Philip, however the use of self-signed will (in the =
short=20
  > term) be=20
  > limited to those "trading partners" who choose to operate in that=20
  > modality.  I=20
  > believe most will be motivated as EDIINT moves forward to choose=20
  > externally=20
  > signed certs.  I am sure the current CA's will follow these =
developments=20
  > closely and move quickly and deploy services in that space.=20
  >=20
  > - From that prospective, however, it is very important to establish =
"good=20
  > practices" for using self-signed certificates NOW, regardless of the =

  > marketplace developments.  I would be interested in some discussion =
on the=20
  >=20
  > parameters (read legal framework) trading partners will establish =
for that=20
  > type=20
  > of activity, this will at least give us some practices to draw from=20
  > concerning=20
  > self-signing and authenticity.=20
  >=20
  > Eric Williams, Pres.=20
  > Information Brokers, Inc.    Phone: +1 202.889.4395=20
  > http://www.infobro.com/        Fax: +1 202.889.4396=20
  >               mailto:eric@infobro.com=20
  >            For More Info: info@infobro.com=20
  >                     PGP Public Key=20
  >    http://new.infobro.com/KeyServ/EricDWilliams.asc=20
  > Finger Print: 1055 8AED 9783 2378 73EF  7B19 0544 A590 FF65 B789=20
  >=20
  >=20
  > On Friday, September 29, 2000 12:55 AM, Totman, Philip PL=20
  > [SMTP:Totman.Philip.PL@bhp.com] wrote:=20
  > > Mark,=20
  > > BHP Steel Australia are about to embark on rolling out an EDIINT=20
  > compliant=20
  > > product to its major trading partners. BHP is commited to Sterling =

  > Commerce=20
  > > solutions (Gentran) and have chosen the Internet Data Exchange =
(IDX)=20
  > product=20
  > > that has been sourced from Cyclone.=20
  > >=20
  > > We are planning to generate self-signed certificates and we expect =
that=20
  > most=20
  > > trading partners will be happy to follow suit until this type of =
EDI=20
  > trading=20
  > > develops and requires external certificate management.=20
  > >=20
  > > regards=20
  > >=20
  > > Philip Totman=20
  > > __________________________________________________=20
  > > CSC Technology Services (formerly BHP IT)=20
  > > CSC=20
  > > 151 King Street, Warrawong NSW 2502=20
  > > Ph: (02) 4275 5436   Email: totman.philip.pl@bhp.com.au=20
  > >=20
  > >=20
  > >=20
  > > > ----------=20
  > > > From:     =
Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com]=20
  > > > Sent:     Friday, 29 September 2000 7:04=20
  > > > To:       ietf-ediint@imc.org=20
  > > > Cc:       Leo_Burstein@gillette.com; =
Robert_Mytkowicz@gillette.com=20
  > > > Subject:  Certificates:  self-signed vs VeriSign=20
  > > >=20
  > > > Folks,=20
  > > >=20
  > > > We're just getting started with EDIINT and we're trying to get a =
sense=20
  > for=20
  > > > whether other=20
  > > > companies are using self-signed certificates or certificates =
from a CA=20
  > such=20
  > > > as VeriSign.=20
  > > >=20
  > > > What seems to be the trend out there?  Would people look askance =
at=20
  > > > self-signed certificates?=20
  > > >=20
  > > >     Mark=20
  > > >=20
  > > >=20
  > > EOM=20
  > >=20
  > > NOTICE - This message contains information intended only for the =
use of=20
  > the=20
  > > addressee named above.  It may also be confidential and/or =
privileged.=20
  > If=20
  > > you are not the intended recipient of this message you are hereby=20
  > notified=20
  > > that you must not disseminate, copy or take any action in reliance =
on=20
  > it.  If=20
  > > you have received this message in error please notify=20
  > postmaster@bhp.com.=20
  > -----BEGIN PGP SIGNATURE-----=20
  > Version: PGP 6.5.8=20
  >=20
  > iQA/AwUBOdSYKAVEpZD/ZbeJEQJCBQCgrpdp65PmqxAlrZeFeWqK+jy4SEcAn1ev=20
  > 4P3ZmJjGP9piZRpZnUXsOro3=20
  > =3DBrJV=20
  > -----END PGP SIGNATURE-----=20


------=_NextPart_000_0006_01C02B1F.ECB8F9E0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>RE: Certificates: self-signed vs VeriSign</TITLE>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4134.600" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Good choice.&nbsp; Works well for =
us.&nbsp; Comes=20
with a freely distributable client piece for those pesky SME=20
situations.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Craig.</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV=20
  style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
  <A title=3Dsharter@vcommerce.com =
href=3D"mailto:sharter@vcommerce.com">Shan=20
  Harter</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>To:</B> <A=20
  title=3DRobert_Briley@Bridge-Point.com=20
  href=3D"mailto:Robert_Briley@Bridge-Point.com">'Briley, Robert'</A> ; =
<A=20
  title=3Dietf-ediint@imc.org=20
  href=3D"mailto:ietf-ediint@imc.org">ietf-ediint@imc.org</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Saturday, September 30, =
2000 7:36=20
  PM</DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Subject:</B> RE: Certificates: =
self-signed vs=20
  VeriSign</DIV>
  <DIV><BR></DIV>
  <P><FONT size=3D2>Does it really matter if its VeriSign or by Cyclone, =
or IDX or=20
  ECXpert, Priminos/Templar. As long at the trust relationship between =
the two=20
  parties has been agreed upon? </FONT></P>
  <P><FONT size=3D2>Vcommerce will probably use IDX's generated =
certificates (AKA=20
  Cyclone).</FONT> </P>
  <P><FONT size=3D2>Shan</FONT> </P>
  <P><FONT size=3D2>-----Original Message-----</FONT> <BR><FONT =
size=3D2>From:=20
  Briley, Robert [<A=20
  =
href=3D"mailto:Robert_Briley@Bridge-Point.com">mailto:Robert_Briley@Bridg=
e-Point.com</A>]</FONT>=20
  <BR><FONT size=3D2>Sent: Friday, September 29, 2000 8:20 AM</FONT> =
<BR><FONT=20
  size=3D2>To: <A =
href=3D"mailto:ietf-ediint@imc.org">ietf-ediint@imc.org</A></FONT>=20
  <BR><FONT size=3D2>Subject: RE: Certificates: self-signed vs =
VeriSign</FONT>=20
  </P><BR>
  <P><FONT size=3D2>As we start to pole our trading partners on their =
certificate=20
  preference,</FONT> <BR><FONT size=3D2>the mix is about split.&nbsp; =
However,=20
  when we ask them the reason behind their</FONT> <BR><FONT =
size=3D2>preference,=20
  they don't usually have an explanation other than "well that</FONT> =
<BR><FONT=20
  size=3D2>just seemed to be the best way".</FONT> </P>
  <P><FONT size=3D2>Rob</FONT> </P>
  <P><FONT size=3D2>Robert Briley</FONT> <BR><FONT size=3D2>Senior =
Network=20
  Engineer</FONT> <BR><FONT size=3D2>BridgePoint, Inc.</FONT> <BR><FONT=20
  size=3D2>robert_briley@bridge-point.com</FONT> </P>
  <P><FONT size=3D2>&gt; -----Original Message-----</FONT> <BR><FONT =
size=3D2>&gt;=20
  From: Eric D. Williams [SMTP:eric@infobro.com]</FONT> <BR><FONT =
size=3D2>&gt;=20
  Sent: Friday, September 29, 2000 9:25 AM</FONT> <BR><FONT =
size=3D2>&gt;=20
  To:&nbsp;&nbsp; ietf-ediint@imc.org</FONT> <BR><FONT size=3D2>&gt;=20
  Cc:&nbsp;&nbsp; 'Totman, Philip PL'</FONT> <BR><FONT size=3D2>&gt;=20
  Subject:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RE: Certificates:&nbsp; =
self-signed vs=20
  VeriSign</FONT> <BR><FONT size=3D2>&gt; </FONT><BR><FONT size=3D2>&gt; =
-----BEGIN=20
  PGP SIGNED MESSAGE-----</FONT> <BR><FONT size=3D2>&gt; Hash: =
SHA1</FONT>=20
  <BR><FONT size=3D2>&gt; </FONT><BR><FONT size=3D2>&gt; Hello =
all,</FONT> <BR><FONT=20
  size=3D2>&gt; I agree with Philip, however the use of self-signed will =
(in the=20
  short</FONT> <BR><FONT size=3D2>&gt; term) be </FONT><BR><FONT =
size=3D2>&gt;=20
  limited to those "trading partners" who choose to operate in =
that</FONT>=20
  <BR><FONT size=3D2>&gt; modality.&nbsp; I </FONT><BR><FONT =
size=3D2>&gt; believe=20
  most will be motivated as EDIINT moves forward to choose</FONT> =
<BR><FONT=20
  size=3D2>&gt; externally </FONT><BR><FONT size=3D2>&gt; signed =
certs.&nbsp; I am=20
  sure the current CA's will follow these developments </FONT><BR><FONT=20
  size=3D2>&gt; closely and move quickly and deploy services in that =
space.</FONT>=20
  <BR><FONT size=3D2>&gt; </FONT><BR><FONT size=3D2>&gt; - From that =
prospective,=20
  however, it is very important to establish "good </FONT><BR><FONT =
size=3D2>&gt;=20
  practices" for using self-signed certificates NOW, regardless of the=20
  </FONT><BR><FONT size=3D2>&gt; marketplace developments.&nbsp; I would =
be=20
  interested in some discussion on the</FONT> <BR><FONT size=3D2>&gt;=20
  </FONT><BR><FONT size=3D2>&gt; parameters (read legal framework) =
trading=20
  partners will establish for that</FONT> <BR><FONT size=3D2>&gt; type=20
  </FONT><BR><FONT size=3D2>&gt; of activity, this will at least give us =
some=20
  practices to draw from</FONT> <BR><FONT size=3D2>&gt; concerning=20
  </FONT><BR><FONT size=3D2>&gt; self-signing and authenticity.</FONT> =
<BR><FONT=20
  size=3D2>&gt; </FONT><BR><FONT size=3D2>&gt; Eric Williams, =
Pres.</FONT> <BR><FONT=20
  size=3D2>&gt; Information Brokers, Inc.&nbsp;&nbsp;&nbsp; Phone: +1=20
  202.889.4395</FONT> <BR><FONT size=3D2>&gt; <A target=3D_blank=20
  =
href=3D"http://www.infobro.com/">http://www.infobro.com/</A>&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
  Fax: +1 202.889.4396</FONT> <BR><FONT=20
  =
size=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;=20
  <A href=3D"mailto:eric@infobro.com">mailto:eric@infobro.com</A></FONT> =
<BR><FONT=20
  =
size=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;=20
  For More Info: info@infobro.com</FONT> <BR><FONT=20
  =
size=3D2>&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
  PGP Public Key</FONT> <BR><FONT size=3D2>&gt;&nbsp;&nbsp;&nbsp; <A =
target=3D_blank=20
  =
href=3D"http://new.infobro.com/KeyServ/EricDWilliams.asc">http://new.info=
bro.com/KeyServ/EricDWilliams.asc</A></FONT>=20
  <BR><FONT size=3D2>&gt; Finger Print: 1055 8AED 9783 2378 73EF&nbsp; =
7B19 0544=20
  A590 FF65 B789</FONT> <BR><FONT size=3D2>&gt; </FONT><BR><FONT =
size=3D2>&gt;=20
  </FONT><BR><FONT size=3D2>&gt; On Friday, September 29, 2000 12:55 AM, =
Totman,=20
  Philip PL </FONT><BR><FONT size=3D2>&gt; =
[SMTP:Totman.Philip.PL@bhp.com]=20
  wrote:</FONT> <BR><FONT size=3D2>&gt; &gt; Mark,</FONT> <BR><FONT =
size=3D2>&gt;=20
  &gt; BHP Steel Australia are about to embark on rolling out an =
EDIINT</FONT>=20
  <BR><FONT size=3D2>&gt; compliant</FONT> <BR><FONT size=3D2>&gt; &gt; =
product to=20
  its major trading partners. BHP is commited to Sterling</FONT> =
<BR><FONT=20
  size=3D2>&gt; Commerce</FONT> <BR><FONT size=3D2>&gt; &gt; solutions =
(Gentran) and=20
  have chosen the Internet Data Exchange (IDX)</FONT> <BR><FONT =
size=3D2>&gt;=20
  product</FONT> <BR><FONT size=3D2>&gt; &gt; that has been sourced from =

  Cyclone.</FONT> <BR><FONT size=3D2>&gt; &gt;</FONT> <BR><FONT =
size=3D2>&gt; &gt;=20
  We are planning to generate self-signed certificates and we expect =
that</FONT>=20
  <BR><FONT size=3D2>&gt; most</FONT> <BR><FONT size=3D2>&gt; &gt; =
trading partners=20
  will be happy to follow suit until this type of EDI</FONT> <BR><FONT=20
  size=3D2>&gt; trading</FONT> <BR><FONT size=3D2>&gt; &gt; develops and =
requires=20
  external certificate management.</FONT> <BR><FONT size=3D2>&gt; =
&gt;</FONT>=20
  <BR><FONT size=3D2>&gt; &gt; regards</FONT> <BR><FONT size=3D2>&gt; =
&gt;</FONT>=20
  <BR><FONT size=3D2>&gt; &gt; Philip Totman</FONT> <BR><FONT =
size=3D2>&gt; &gt;=20
  __________________________________________________</FONT> <BR><FONT=20
  size=3D2>&gt; &gt; CSC Technology Services (formerly BHP IT)</FONT> =
<BR><FONT=20
  size=3D2>&gt; &gt; CSC</FONT> <BR><FONT size=3D2>&gt; &gt; 151 King =
Street,=20
  Warrawong NSW 2502</FONT> <BR><FONT size=3D2>&gt; &gt; Ph: (02) 4275=20
  5436&nbsp;&nbsp; Email: totman.philip.pl@bhp.com.au</FONT> <BR><FONT=20
  size=3D2>&gt; &gt;</FONT> <BR><FONT size=3D2>&gt; &gt;</FONT> =
<BR><FONT=20
  size=3D2>&gt; &gt;</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; =
----------</FONT>=20
  <BR><FONT size=3D2>&gt; &gt; &gt; From: &nbsp;&nbsp;&nbsp;=20
  Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com]</FONT> =
<BR><FONT=20
  size=3D2>&gt; &gt; &gt; Sent: &nbsp;&nbsp;&nbsp; Friday, 29 September =
2000=20
  7:04</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; To: =
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
  ietf-ediint@imc.org</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; Cc:=20
  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Leo_Burstein@gillette.com;=20
  Robert_Mytkowicz@gillette.com</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; =

  Subject:&nbsp; Certificates:&nbsp; self-signed vs VeriSign</FONT> =
<BR><FONT=20
  size=3D2>&gt; &gt; &gt;</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; =
Folks,</FONT>=20
  <BR><FONT size=3D2>&gt; &gt; &gt;</FONT> <BR><FONT size=3D2>&gt; &gt; =
&gt; We're=20
  just getting started with EDIINT and we're trying to get a =
sense</FONT>=20
  <BR><FONT size=3D2>&gt; for</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; =
whether=20
  other</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; companies are using =
self-signed=20
  certificates or certificates from a CA</FONT> <BR><FONT size=3D2>&gt;=20
  such</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; as VeriSign.</FONT> =
<BR><FONT=20
  size=3D2>&gt; &gt; &gt;</FONT> <BR><FONT size=3D2>&gt; &gt; &gt; What =
seems to be=20
  the trend out there?&nbsp; Would people look askance at</FONT> =
<BR><FONT=20
  size=3D2>&gt; &gt; &gt; self-signed certificates?</FONT> <BR><FONT =
size=3D2>&gt;=20
  &gt; &gt;</FONT> <BR><FONT size=3D2>&gt; &gt; =
&gt;&nbsp;&nbsp;&nbsp;&nbsp;=20
  Mark</FONT> <BR><FONT size=3D2>&gt; &gt; &gt;</FONT> <BR><FONT =
size=3D2>&gt; &gt;=20
  &gt;</FONT> <BR><FONT size=3D2>&gt; &gt; EOM</FONT> <BR><FONT =
size=3D2>&gt;=20
  &gt;</FONT> <BR><FONT size=3D2>&gt; &gt; NOTICE - This message =
contains=20
  information intended only for the use of</FONT> <BR><FONT =
size=3D2>&gt;=20
  the</FONT> <BR><FONT size=3D2>&gt; &gt; addressee named above.&nbsp; =
It may also=20
  be confidential and/or privileged.</FONT> <BR><FONT size=3D2>&gt; =
If</FONT>=20
  <BR><FONT size=3D2>&gt; &gt; you are not the intended recipient of =
this message=20
  you are hereby</FONT> <BR><FONT size=3D2>&gt; notified</FONT> =
<BR><FONT=20
  size=3D2>&gt; &gt; that you must not disseminate, copy or take any =
action in=20
  reliance on</FONT> <BR><FONT size=3D2>&gt; it.&nbsp; If</FONT> =
<BR><FONT=20
  size=3D2>&gt; &gt; you have received this message in error please =
notify</FONT>=20
  <BR><FONT size=3D2>&gt; postmaster@bhp.com.</FONT> <BR><FONT =
size=3D2>&gt;=20
  -----BEGIN PGP SIGNATURE-----</FONT> <BR><FONT size=3D2>&gt; Version: =
PGP=20
  6.5.8</FONT> <BR><FONT size=3D2>&gt; </FONT><BR><FONT size=3D2>&gt;=20
  =
iQA/AwUBOdSYKAVEpZD/ZbeJEQJCBQCgrpdp65PmqxAlrZeFeWqK+jy4SEcAn1ev</FONT>=20
  <BR><FONT size=3D2>&gt; 4P3ZmJjGP9piZRpZnUXsOro3</FONT> <BR><FONT =
size=3D2>&gt;=20
  =3DBrJV</FONT> <BR><FONT size=3D2>&gt; -----END PGP =
SIGNATURE-----</FONT>=20
</P></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0006_01C02B1F.ECB8F9E0--



From owner-ietf-ediint@mail.imc.org  Sat Sep 30 23:44:41 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id XAA05755
	for <ediint-archive@odin.ietf.org>; Sat, 30 Sep 2000 23:44:40 -0400 (EDT)
Received: (from majordomo@localhost)
	by ns.secondary.com (8.9.3/8.9.3) id UAA21739
	for ietf-ediint-bks; Sat, 30 Sep 2000 20:11:55 -0700 (PDT)
Received: from c1plenaexi01.commerceone.com (mail.commerceone.com [12.22.60.14])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id UAA21734
	for <ietf-ediint@imc.org>; Sat, 30 Sep 2000 20:11:53 -0700 (PDT)
Received: by c1plenaexi01.commerceone.com with Internet Mail Service (5.5.2650.21)
	id <T5BV19KV>; Sat, 30 Sep 2000 20:17:09 -0700
Message-ID: <4C4A7BE77CE1D311A1D200508BA38C120D3C25@venus.commerceone.com>
From: "Ahmed, Zahid" <zahid.ahmed@commerceone.com>
To: "'Craig Wilson'" <cwilson@transettlements.com>,
        Shan Harter
	 <sharter@vcommerce.com>,
        "'Briley, Robert'"
	 <Robert_Briley@Bridge-Point.com>,
        ietf-ediint@imc.org
Subject: RE: Certificates:  self-signed vs VeriSign
Date: Sat, 30 Sep 2000 20:15:24 -0700
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2650.21)
Content-Type: text/plain;
	charset="iso-8859-1"
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>

Depends what type of certificate services we are talking about.
 
If it is SSL Server certificates for internet facing applications, it seems
that we do want to use
a public CA to provide certificate issuance/revocation services.
 
If it is other types of certificates, you could use a private, closed CA;
however, the central issue
here is who provides liability backing for the secure transactions. Are
there any models for
transaction liability between trading partners in the EDI over the internet
world?
 
---Zahid

-----Original Message-----
From: Craig Wilson [mailto:cwilson@transettlements.com]
Sent: Saturday, September 30, 2000 5:49 PM
To: Shan Harter; 'Briley, Robert'; ietf-ediint@imc.org
Subject: Re: Certificates: self-signed vs VeriSign


Good choice.  Works well for us.  Comes with a freely distributable client
piece for those pesky SME situations.
 
Craig.

----- Original Message ----- 
From: Shan  <mailto:sharter@vcommerce.com> Harter 
To: 'Briley, Robert' <mailto:Robert_Briley@Bridge-Point.com>  ;
ietf-ediint@imc.org <mailto:ietf-ediint@imc.org>  
Sent: Saturday, September 30, 2000 7:36 PM
Subject: RE: Certificates: self-signed vs VeriSign


Does it really matter if its VeriSign or by Cyclone, or IDX or ECXpert,
Priminos/Templar. As long at the trust relationship between the two parties
has been agreed upon? 

Vcommerce will probably use IDX's generated certificates (AKA Cyclone). 

Shan 

-----Original Message----- 
From: Briley, Robert [ mailto:Robert_Briley@Bridge-Point.com
<mailto:Robert_Briley@Bridge-Point.com> ] 
Sent: Friday, September 29, 2000 8:20 AM 
To: ietf-ediint@imc.org <mailto:ietf-ediint@imc.org>  
Subject: RE: Certificates: self-signed vs VeriSign 


As we start to pole our trading partners on their certificate preference, 
the mix is about split.  However, when we ask them the reason behind their 
preference, they don't usually have an explanation other than "well that 
just seemed to be the best way". 

Rob 

Robert Briley 
Senior Network Engineer 
BridgePoint, Inc. 
robert_briley@bridge-point.com 

> -----Original Message----- 
> From: Eric D. Williams [SMTP:eric@infobro.com] 
> Sent: Friday, September 29, 2000 9:25 AM 
> To:   ietf-ediint@imc.org 
> Cc:   'Totman, Philip PL' 
> Subject:      RE: Certificates:  self-signed vs VeriSign 
> 
> -----BEGIN PGP SIGNED MESSAGE----- 
> Hash: SHA1 
> 
> Hello all, 
> I agree with Philip, however the use of self-signed will (in the short 
> term) be 
> limited to those "trading partners" who choose to operate in that 
> modality.  I 
> believe most will be motivated as EDIINT moves forward to choose 
> externally 
> signed certs.  I am sure the current CA's will follow these developments 
> closely and move quickly and deploy services in that space. 
> 
> - From that prospective, however, it is very important to establish "good 
> practices" for using self-signed certificates NOW, regardless of the 
> marketplace developments.  I would be interested in some discussion on the

> 
> parameters (read legal framework) trading partners will establish for that

> type 
> of activity, this will at least give us some practices to draw from 
> concerning 
> self-signing and authenticity. 
> 
> Eric Williams, Pres. 
> Information Brokers, Inc.    Phone: +1 202.889.4395 
> http://www.infobro.com/ <http://www.infobro.com/>         Fax: +1
202.889.4396 
>               mailto:eric@infobro.com <mailto:eric@infobro.com>  
>            For More Info: info@infobro.com 
>                     PGP Public Key 
>    http://new.infobro.com/KeyServ/EricDWilliams.asc
<http://new.infobro.com/KeyServ/EricDWilliams.asc>  
> Finger Print: 1055 8AED 9783 2378 73EF  7B19 0544 A590 FF65 B789 
> 
> 
> On Friday, September 29, 2000 12:55 AM, Totman, Philip PL 
> [SMTP:Totman.Philip.PL@bhp.com] wrote: 
> > Mark, 
> > BHP Steel Australia are about to embark on rolling out an EDIINT 
> compliant 
> > product to its major trading partners. BHP is commited to Sterling 
> Commerce 
> > solutions (Gentran) and have chosen the Internet Data Exchange (IDX) 
> product 
> > that has been sourced from Cyclone. 
> > 
> > We are planning to generate self-signed certificates and we expect that 
> most 
> > trading partners will be happy to follow suit until this type of EDI 
> trading 
> > develops and requires external certificate management. 
> > 
> > regards 
> > 
> > Philip Totman 
> > __________________________________________________ 
> > CSC Technology Services (formerly BHP IT) 
> > CSC 
> > 151 King Street, Warrawong NSW 2502 
> > Ph: (02) 4275 5436   Email: totman.philip.pl@bhp.com.au 
> > 
> > 
> > 
> > > ---------- 
> > > From:     Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com] 
> > > Sent:     Friday, 29 September 2000 7:04 
> > > To:       ietf-ediint@imc.org 
> > > Cc:       Leo_Burstein@gillette.com; Robert_Mytkowicz@gillette.com 
> > > Subject:  Certificates:  self-signed vs VeriSign 
> > > 
> > > Folks, 
> > > 
> > > We're just getting started with EDIINT and we're trying to get a sense

> for 
> > > whether other 
> > > companies are using self-signed certificates or certificates from a CA

> such 
> > > as VeriSign. 
> > > 
> > > What seems to be the trend out there?  Would people look askance at 
> > > self-signed certificates? 
> > > 
> > >     Mark 
> > > 
> > > 
> > EOM 
> > 
> > NOTICE - This message contains information intended only for the use of 
> the 
> > addressee named above.  It may also be confidential and/or privileged. 
> If 
> > you are not the intended recipient of this message you are hereby 
> notified 
> > that you must not disseminate, copy or take any action in reliance on 
> it.  If 
> > you have received this message in error please notify 
> postmaster@bhp.com. 
> -----BEGIN PGP SIGNATURE----- 
> Version: PGP 6.5.8 
> 
> iQA/AwUBOdSYKAVEpZD/ZbeJEQJCBQCgrpdp65PmqxAlrZeFeWqK+jy4SEcAn1ev 
> 4P3ZmJjGP9piZRpZnUXsOro3 
> =BrJV 
> -----END PGP SIGNATURE----- 



From owner-ietf-ediint@mail.imc.org  Sat Sep 30 23:59:15 2000
Received: from ns.secondary.com (ns.secondary.com [208.184.76.39])
	by ietf.org (8.9.1a/8.9.1a) with SMTP id XAA05899
	for <ediint-archive@odin.ietf.org>; Sat, 30 Sep 2000 23:59:15 -0400 (EDT)
Received: (from majordomo@localhost)
	by ns.secondary.com (8.9.3/8.9.3) id UAA22043
	for ietf-ediint-bks; Sat, 30 Sep 2000 20:30:00 -0700 (PDT)
Received: from falcon.prod.itd.earthlink.net (falcon.prod.itd.earthlink.net [207.217.120.74])
	by ns.secondary.com (8.9.3/8.9.3) with ESMTP id UAA22035
	for <ietf-ediint@imc.org>; Sat, 30 Sep 2000 20:29:59 -0700 (PDT)
Received: from darnelltecra (atl-tgn-ydr-vty134.as.wcom.net [216.192.182.134])
	by falcon.prod.itd.earthlink.net (8.9.3-EL_1_3/8.9.3) with SMTP id UAA22278;
	Sat, 30 Sep 2000 20:33:33 -0700 (PDT)
Reply-To: <dave@systrends.com>
From: "Dave Darnell" <dave@systrends.com>
To: "'Shan Harter'" <sharter@vcommerce.com>,
        "'Briley, Robert'" <Robert_Briley@Bridge-Point.com>,
        <ietf-ediint@imc.org>
Cc: <davidj@systrends.com>
Subject: RE: Certificates:  self-signed vs Verisign
Date: Sat, 30 Sep 2000 20:32:55 -0700
Message-ID: <000601c02b58$4ae60980$86b6c0d8@darnelltecra>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
Importance: Normal
In-Reply-To: <7D9ADF294A9D1E4B82F9C4A7125B156FACFB3F@SCTMAIL01.Vstore.com>
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Sender: owner-ietf-ediint@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-ediint/mail-archive/>
List-ID: <ietf-ediint.imc.org>
List-Unsubscribe: <mailto:ietf-ediint-request@imc.org?body=unsubscribe>
Content-Transfer-Encoding: 7bit

Shan,

There are many advantages to a third party certificate authority
providing certificates for a trading partner community.

Digital signatures are verified via the public key that is contained
in an X.509 cert.

A CA gives its digital signature on an X.509 cert to give a level of
authenticity to the identity of the entity holding the cert.

Verisign is a CA that is one of a very few that has passed the
California requirements for registration to legally provide CA
services.

A CA like Verisign will keep X.509 certs in its directory service for
many years... long past the expiration date of the cert.  This will
allow subscribers to download certs that have expired so that digital
signatures can be checked on documents and transactions years after
the original digital signature has been applied.

A digital signature is growing in importance especially with the
latest digital signature laws enacted at the federal and state levels.

As you know, Shan, a digital signature provides authenticity,
non-repudiation, and integrity to a electronic commerce transaction.
Coupled with state and federal laws and the use of a certified CA's
X.509 cert, an electronic business transaction carries all the legal
power of any other type of transaction (such as a paper contract with
a notary public certified "wet" signatures).

I am in favor of utilizing a third party CA rather than self-signed
certs because of the additional benefits the CA provides, including
the legal issues.

In my humble opinion, of course.

Have a good weekend.

-Dave Darnell





-----Original Message-----
From: Shan Harter [mailto:sharter@vcommerce.com]
Sent: Saturday, September 30, 2000 4:37 PM
To: 'Briley, Robert'; ietf-ediint@imc.org
Subject: RE: Certificates: self-signed vs VeriSign


Does it really matter if its VeriSign or by Cyclone, or IDX or
ECXpert,
Priminos/Templar. As long at the trust relationship between the two
parties has been agreed upon?

Vcommerce will probably use IDX's generated certificates (AKA
Cyclone).

Shan

-----Original Message-----
From: Briley, Robert [ mailto:Robert_Briley@Bridge-Point.com
<mailto:Robert_Briley@Bridge-Point.com> ]
Sent: Friday, September 29, 2000 8:20 AM
To: ietf-ediint@imc.org
Subject: RE: Certificates: self-signed vs VeriSign


As we start to pole our trading partners on their certificate
preference,
the mix is about split.  However, when we ask them the reason behind
their
preference, they don't usually have an explanation other than "well
that

just seemed to be the best way".

Rob

Robert Briley
Senior Network Engineer
BridgePoint, Inc.
robert_briley@bridge-point.com

> -----Original Message-----
> From: Eric D. Williams [SMTP:eric@infobro.com]
> Sent: Friday, September 29, 2000 9:25 AM
> To:   ietf-ediint@imc.org
> Cc:   'Totman, Philip PL'
> Subject:      RE: Certificates:  self-signed vs VeriSign
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello all,
> I agree with Philip, however the use of self-signed will (in the
short

> term) be
> limited to those "trading partners" who choose to operate in that
> modality.  I
> believe most will be motivated as EDIINT moves forward to choose
> externally
> signed certs.  I am sure the current CA's will follow these
developments
> closely and move quickly and deploy services in that space.
>
> - From that prospective, however, it is very important to establish
"good
> practices" for using self-signed certificates NOW, regardless of the
> marketplace developments.  I would be interested in some discussion
on
the
>
> parameters (read legal framework) trading partners will establish
for
that
> type
> of activity, this will at least give us some practices to draw from
> concerning
> self-signing and authenticity.
>
> Eric Williams, Pres.
> Information Brokers, Inc.    Phone: +1 202.889.4395
> http://www.infobro.com/ <http://www.infobro.com/>         Fax: +1
202.889.4396
>               mailto:eric@infobro.com <mailto:eric@infobro.com>
>            For More Info: info@infobro.com
>                     PGP Public Key
>    http://new.infobro.com/KeyServ/EricDWilliams.asc
<http://new.infobro.com/KeyServ/EricDWilliams.asc>
> Finger Print: 1055 8AED 9783 2378 73EF  7B19 0544 A590 FF65 B789
>
>
> On Friday, September 29, 2000 12:55 AM, Totman, Philip PL
> [SMTP:Totman.Philip.PL@bhp.com] wrote:
> > Mark,
> > BHP Steel Australia are about to embark on rolling out an EDIINT
> compliant
> > product to its major trading partners. BHP is commited to Sterling
> Commerce
> > solutions (Gentran) and have chosen the Internet Data Exchange
(IDX)

> product
> > that has been sourced from Cyclone.
> >
> > We are planning to generate self-signed certificates and we expect
that
> most
> > trading partners will be happy to follow suit until this type of
EDI

> trading
> > develops and requires external certificate management.
> >
> > regards
> >
> > Philip Totman
> > __________________________________________________
> > CSC Technology Services (formerly BHP IT)
> > CSC
> > 151 King Street, Warrawong NSW 2502
> > Ph: (02) 4275 5436   Email: totman.philip.pl@bhp.com.au
> >
> >
> >
> > > ----------
> > > From:
Mark_Mueller@gillette.com[SMTP:Mark_Mueller@gillette.com]
> > > Sent:     Friday, 29 September 2000 7:04
> > > To:       ietf-ediint@imc.org
> > > Cc:       Leo_Burstein@gillette.com;
Robert_Mytkowicz@gillette.com

> > > Subject:  Certificates:  self-signed vs VeriSign
> > >
> > > Folks,
> > >
> > > We're just getting started with EDIINT and we're trying to get a
sense
> for
> > > whether other
> > > companies are using self-signed certificates or certificates
from
a CA
> such
> > > as VeriSign.
> > >
> > > What seems to be the trend out there?  Would people look askance
at
> > > self-signed certificates?
> > >
> > >     Mark
> > >
> > >
> > EOM
> >
> > NOTICE - This message contains information intended only for the
use
of
> the
> > addressee named above.  It may also be confidential and/or
privileged.
> If
> > you are not the intended recipient of this message you are hereby
> notified
> > that you must not disseminate, copy or take any action in reliance
on
> it.  If
> > you have received this message in error please notify
> postmaster@bhp.com.
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 6.5.8
>
> iQA/AwUBOdSYKAVEpZD/ZbeJEQJCBQCgrpdp65PmqxAlrZeFeWqK+jy4SEcAn1ev
> 4P3ZmJjGP9piZRpZnUXsOro3
> =BrJV
> -----END PGP SIGNATURE-----



