4 ms·

At least with Comodo's s/mime service, they provide you with the private key [1]. IIRC, Symantec/Verisign did the same thing. - [1] https://secure.comodo.com/p

• nickf 13y ago
  No, they don't. The keys are generated using in-browser controls (XEnroll/CertEnroll and HTML 'keygen' tag).
• m_eiman 13y ago
  I think the free personal certs are server-generated, the business ones are generated client-side.
• acabal 13y ago
  That's the one I used, and if I recall correctly they sent me an email with a link for me to download the cert. This suggests to me that it was generated server-side and that therefore they could have kept a copy for themselves. But I might be totally wrong on how it works.