There has been a certain amount of uproar about how Firefox 3handles self-signed SSL certificates ,and a certain amount of attempts to justify it . I disagreeviolently with the attempts to excuse the behavior, because whatit comes down to for me is that Firefox 3 has made it more attractive to have no SSL certificate at all than to have a self-signedone. This is both insane and inane; it does nothing to furthersecurity on the Internet, and it has basically nothing to do withthe sorts

One of the periodically proposed spam solutions is that someone willissue certificates to people and if they misbehave, the certificateswill be revoked. One of the many problems with this idea is what I willcall the corporate identity problem .

The problem with corporate identities is twofold, or perhapsthreefold. First, corporate identities are much like Internetidentities : they provide only positiveidentity, that person A is associated with corporation B, not negativeidentities, that corporation B is not associated with person A. In factthere are a