[Ach] Please verify this is OK

[Axel Hübl]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Nej,

you create the pub/private pair in your browser and send them the
public key.

they don't email you anything.

anyway, I do not think that is very transparently stated/done there...

Axel
On 31.03.2014 11:18, Aaron Zauner wrote:
> 
> 
> Axel Hübl wrote:
>> If I am not mistaken, the key gets generated by your browsers
>> crypto api during the comodo key generation.
>> 
> Well, you get e-mailed a certificate/PKCS12 file, I cannot confirm
> how these were produced, right?
> 
> https://en.wikipedia.org/wiki/Kleptography
> 
> Just saying.
> 
> Aaron
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=pp0s
-----END PGP SIGNATURE-----