[db-wg] Re: [ncc-services-wg] X.509 authentication in the RIPE Database

> let the RIRs spend a few of the bucks they have getting their certs
> signed by a well-trusted root CA.

Is there such a thing?  I can't think of a "well-known" root CA I'd
trust farther than I could throw it.  (It's not entirely clear to me
what these would be used for.  What I've seen leads me to think this is
for some SSLified Web horror, in which case the obvious answer is
surely to just tell your client software to trust that root cert only
for connections to the relevant RIR's pages, preferably with active
_dis_trust for other connections.)

/~\ The ASCII				der Mouse
\ / Ribbon Campaign
 X  Against HTML	       mouse at rodents.montreal.qc.ca
/ \ Email!	     7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B