RE: [PCTECH] I learned something about certificatesandencryptin gfile systems the other day ...

["Jones, John (US)" <John.Jones@xxxxxxxxxxxxxxxxxxxxxxx>]

If certificates are to be system-wide in scope, certificate management
should be moved out of IE and into a Control Panel applet.  And of
course I don't mean 'Internet options'.  

Let IE call system APIs for cert management and give us a separate
appropriate interface.  While we're at it, have the interface list not
only cert expiration date, but creation & last used date and known
application dependencies so we can manage certs ourselves as needed.
The current interface is just lousy.

-----Original Message-----
From: Adam Lang [mailto:aalang@xxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, October 28, 2003 8:15 AM
To: PC Technical Discussion for iSeries Users
Subject: Re: [PCTECH] I learned something about certificatesandencryptin
gfile systems the other day ...


Again, it comes down to knowing the OS.  IE and the OS have not been
separate entities for years.  The other way to look at it is if you need
a certificate to do "such and such" on the web and need a certificate to
"encrypt your file system" wouldn't it make sense to just use the same
certificate?

Apparently it is really just an issue of MS needing to mention that
problem when someone goes to remove a certificate and tell all that it
affects.

----- Original Message ----- 
From: "Ken Sims" <mr3111@xxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: Saturday, October 25, 2003 2:26 PM
Subject: RE: [PCTECH] I learned something about certificatesandencryptin
g file systems the other day ...


> Hi Mark -
>
> >Interesting. I know you can wipe AIX (and I suspect any box) using 
> >root,
rm
> >*
> >This may have changed over the years with some vendors.
> >Now, I am curious if IBM missed that? Will the iSeries version do 
> >this?
>
> Looking first at the RMVLNK and RMVDIR OS/400 commands, while the 
> statements are not as explicit as with CLRLIB and DLTLIB, I don't 
> think
you
> can clear or delete QSYS or other system libraries with any of those
commands.
>
> As for a Linux partition on an iSeries machine ... I have no idea.  
> But even if you can, you wouldn't be hosing OS/400, you would be 
> hosing Linux.  And you would only be hosing that partition.
>
> But getting back to what started this discussion ...
>
> If a person deletes the operating system programs, that person should 
> reasonably expect the operating system to be hosed.
>
> If a person deletes a certificate in a web browser, I don't think that

> person should reasonably be expected to intuitively realize that an 
> encrypted file system will become inaccessible.
>
> Ken
> http://www.ke9nr.net/
> Opinions expressed are my own and do not necessarily represent the 
> views
of
> my employer or anyone in their right mind.

_______________________________________________
This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list To post a message email: PcTech@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.