[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] How evil is TLS cert collection?

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] How evil is TLS cert collection?
From: tagnaq <tagnaq@xxxxxxxxx>
Date: Sat, 04 Jun 2011 22:19:12 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sat, 04 Jun 2011 16:20:06 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:message-id:date:from:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=A8bdL6U/ipVNKk8hLZQz4lQTdrLHvg203tQJ7olf58g=; b=mhv6VBZDB7W/LxHyhkQv7vFTz18U5bx/HqRih5DHxhd7stsp4PZDfiivvi0ZAfcY9G 2mAVntokq2cpy/f0djWkQG169PpX1KuhjWkB2fIEHmyIVG+nfnXzFI/Hy4qEDQewkmxv xyLDUY0h5xzTrbJAOQug/DxrvTI6HfMkpPtTc=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; b=sXLyqnOvOvY1lY149JEOzlyW2Va5bsqJqiLuDHO5uM1T8YKB2RqaiKoKNhT65reHjy 44j9IJWxoO4M5gPMtBrPv+6JT2rsGvWzOKHIiPP/qmCCZGuwQnddFKJYw27gLwn+IbI8 ynCZMwlFxVWz2xt74v4wjIUFYka1khvcZSSew=
In-reply-to: <4DEA0ADA.8000409@xxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "This mailing list is for all discussion about theory, design, and development of Onion Routing." <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <20110321005806.GA15548@xxxxxxxxxx> <4DE9822F.6080106@xxxxxxxxx> <20110604075527.GB19248@xxxxxxxxxx> <4DEA0ADA.8000409@xxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 06/04/2011 12:37 PM, tagnaq wrote:
> IP address and hostname (and cert.) of intranet-server1.example.com
> using a valid certificate *.example.com will be published even if the
> first two options in the "advanced options" are enabled. Is that correct?
> In such scenarios I'm not worried about the certificate being submitted
> but the hostname and IP address (domain and server_ip arguments).

To make this example clearer:
The internal DNS resolves intranet-server1.example.com to a public IP
address (non RFC1918). The public DNS does not resolve this hostname
(split DNS).
-----BEGIN PGP SIGNATURE-----

iF4EAREKAAYFAk3qk0AACgkQyM26BSNOM7YgjQD/Y5k2f4A5oZ1iN6YHAvlxm76f
imGN4ouFX1BftSTBdJkBAIr1xVUdNg8enYqo8n984ClZ29vzJcKpEfOgVfjYmrFk
=i/Wt
-----END PGP SIGNATURE-----
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

References:
- Re: [tor-talk] How evil is TLS cert collection?
  - From: tagnaq
- Re: [tor-talk] How evil is TLS cert collection?
  - From: Mike Perry
- Re: [tor-talk] How evil is TLS cert collection?
  - From: tagnaq

Prev by Author: Re: [tor-talk] How evil is TLS cert collection?
Next by Author: Re: [tor-talk] How evil is TLS cert collection?
Previous by thread: Re: [tor-talk] How evil is TLS cert collection?
Next by thread: Re: [tor-talk] How evil is TLS cert collection?
Index(es):
- Author
- Thread