turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- AT&T Forums Home
- /
- Wireless Forums
- /
- Phones & Devices
- /
- BlackBerry
- /
- Re: Explain website trust certificates and "Handhe...
Reply
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic to the Top
- Bookmark
- Subscribe
- Printer Friendly Page
Explain website trust certificat es and "Handheld key store" in the RIM Blackberry world
Post Options
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Email to a Friend
- Report Inappropriate Content
11-17-2008 10:55:20 AM
I tried to access three banks' websites via the Blackberry browser. I got messages that ".. the server's certificate is not trusted." Options are "View certificate", "Trust certificate", "Close connection." View certificate reveals the server's Trust Status is "Not Trusted" and the Issuer is Verisign, Inc. Choosing "Trust certificate" results in a request from RIM that I enter a password for my "Handheld Key Store".
My question: what is the appropriate user response here?
Is it not the responsibility of the server owner (the bank) to ensure their trust certificate with VeriSign or eTrust or whoever is valid?
Is the RIM browser supposed to do something? My understanding was that the whole idea of Trust Certificates was to provide the user assurance that he/she was dealing with the real website.
Anyone have any thoughts on this?
My question: what is the appropriate user response here?
Is it not the responsibility of the server owner (the bank) to ensure their trust certificate with VeriSign or eTrust or whoever is valid?
Is the RIM browser supposed to do something? My understanding was that the whole idea of Trust Certificates was to provide the user assurance that he/she was dealing with the real website.
Anyone have any thoughts on this?
Re: Explain website trust certificat es and "Handheld key store" in the RIM Blackberry
Post Options
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Highlight
- Email to a Friend
- Report Inappropriate Content
11-24-2008 01:04:45 PM
The Blackberry website www.Blackberry.com has a good explanation of Certificate-based authentication. The Blackberry software uses LDAP servers, OCSP servers and CRL servers to manage access to secure websites.








