~/ learn/ comp-400/ cards/ PKIX, certificate assurance classes, and identity federation
1 of 8

A bank ordering a certificate for its online-banking service, and a vendor ordering one to sign its shipped software, both needed the same class under the historical three-class assurance scheme. Which class?

A bank ordering a certificate for its online-banking service, and a vendor ordering one to sign its shipped software, both needed the same class under the historical three-class assurance scheme. Which class?

Answer

Class 3

Options - A. Class 3 - B. Class 1 - C. Class 2 - D. Class 4 Why - A. Correct. Class 3 required independent verification that the applicant actually exists — the level of checking a commercial server certificate has to be worth. - B. Class 1 confirmed an e-mail address and nothing else, which is the right assurance for personal mail and casual browsing, not for a bank. - C. Class 2 added a check against a third-party database. Closer, but still nobody independently verified the organisation. - D. The scheme defined three classes; there was no Class 4. If a class number you do not recognise appears among the options, count the ladder rather than assuming there is a rung above the top. Memory hook: e-mail only, then a database check, then independent verification of a real organisation.

Historical VeriSign Digital ID certificate class definitions

space flip · ← → navigate · esc to exit
NORMAL ~/memra/library/636906fb-c043-4209-80f0-e03d58306692/flashcard utf-8 LF