Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!orion.oac.uci.edu!ucivax!gateway From: phmb@otter.hpl.hp.COM (Peter Brooks) Newsgroups: comp.protocols.iso.x400 Subject: X.509 use in industry Message-ID: <27720001@otter.hpl.hp.com> Date: 9 Apr 91 22:04:58 GMT Organization: Hewlett-Packard Laboratories, Bristol, UK. Lines: 16 Approved: usenet@ICS.UCI.EDU x-attn: jns X-Previously-To: comp-protocols-iso-x400@rutgers.EDU ReSent-From: Jerry Sweet ReSent-To: mhsnews@ICS.UCI.EDU This is less a scientific than a commercial question, but somebody may know that answer. CCITT recommendation X.509 makes reference to a CA or Certification Authority. This is the agent who can supply a public key certificate, or the public and private algorithms to companies, or, presumably anybody else who wants to use them. My question is, do such CA's exist? Are they bodies such as the CCITT, or the NIA, or is this service offered by private companies? What does it cost? Is it supplied as a service with an annual charge - for secure coding, X.506 suggests that the keys expire? Do any banks or other firms use X.509? Peter Brooks