[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Avoiding HTTPS pitfalls [was: Re: Moxie Marlinspike]

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Avoiding HTTPS pitfalls [was: Re: Moxie Marlinspike]
From: coderman <coderman@xxxxxxxxx>
Date: Mon, 23 Feb 2009 12:19:07 -0800
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Mon, 23 Feb 2009 15:19:10 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=XyywVCcPHJ+LsJUwKQuVB12qgxbsmI2i45xfY6B7ApE=; b=rOzAWhrY62tO+mYzwq6qR43iK9x7Vpe05GvcmBf8rXVJOEO4Mw9ni1xSyQqTVJ0Fnl OdFKLFAplFB0P4vG+tu+Ln8cjUbwM5D+MdjPKgHFNlfG9IzO4FrGGx3b07u+MKvkG819 qlJwrTmzZPQus1cUWqjBknrUIHqn817Vpqy5o=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=YAkHxgGH5csByhn8Yr4YkjTp0vMT5djUa2cI413fxcEATlz3x6xfoStwsUsXyLDKts X1Ao+03wg7pCpEHJqk4m0djyTE/StRME6hvCTrC+yApFOhjxxIcxUOScfEop5oG59Ig9 dMxMqnqqGh5YO8qeaS9uQEBwUgQ8O87K6ljbg=
In-reply-to: <a5b589a70902231204q107362e4q31c7074115f19860@xxxxxxxxxxxxxx>
References: <4ef5fec60902231119s2cccd1bcwdfb3313046b2a988@xxxxxxxxxxxxxx> <a5b589a70902231204q107362e4q31c7074115f19860@xxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On Mon, Feb 23, 2009 at 12:04 PM, Fran Litterio <flitterio@xxxxxxxxx> wrote:
> ...
> This is ok, but I'd also like to be alerted when the certificate changes for
> a site that I regularly visit.

yes.

Tyler's suggestion is a good one.  if you want the certs themselves
authenticated you get to manage them yourself too.  remove all CA's by
nuking libnssckbi.so and only add back those you've authenticated and
trust.

sadly, this is beyond the skills of most people. the PKI cartel lives
another day... :P

best regards,

References:
- Avoiding HTTPS pitfalls [was: Re: Moxie Marlinspike]
  - From: coderman
- Re: Avoiding HTTPS pitfalls [was: Re: Moxie Marlinspike]
  - From: Fran Litterio

Prev by Author: Tor on virtual servers [was: Re: Suspended..]
Next by Author: Re: aes performance
Previous by thread: Re: Avoiding HTTPS pitfalls [was: Re: Moxie Marlinspike]
Next by thread: Re: Avoiding HTTPS pitfalls [was: Re: Moxie Marlinspike]
Index(es):
- Author
- Thread