A bank ordering a certificate for its online-banking service, and a vendor ordering one to sign its shipped software, both needed the same class under the historical three-class assurance scheme. Which class?
A bank ordering a certificate for its online-banking service, and a vendor ordering one to sign its shipped software, both needed the same class under the historical three-class assurance scheme. Which class?
Answer
Class 3
Options - A. Class 3 - B. Class 1 - C. Class 2 - D. Class 4 Why - A. Correct. Class 3 required independent verification that the applicant actually exists — the level of checking a commercial server certificate has to be worth. - B. Class 1 confirmed an e-mail address and nothing else, which is the right assurance for personal mail and casual browsing, not for a bank. - C. Class 2 added a check against a third-party database. Closer, but still nobody independently verified the organisation. - D. The scheme defined three classes; there was no Class 4. If a class number you do not recognise appears among the options, count the ladder rather than assuming there is a rung above the top. Memory hook: e-mail only, then a database check, then independent verification of a real organisation.
Historical VeriSign Digital ID certificate class definitions