On 11/16/06, <b class="gmail_sendername">Christian Brechbühler</b> <<a href="mailto:brechbuehler@gmail.com">brechbuehler@gmail.com</a>> wrote:<div><span class="gmail_quote"></span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
keep the certificate on a separate host,
if you can.</blockquote><div><br>
For clarity: I meant "keep the <span style="font-style: italic;">certificate authority (CA)</span> on a separate host".<br>
Guard it well. Here's where you create and sign the various
peer's certificates. Make sure you distribute the certificates to
their owners in a secure way, e.g., floppy, CD-ROM; ssh/scp/sftp is
probably OK too.<br>
</div><br></div>Christian<br>