View Single Post
  #4   (View Single Post)  
Old 25th March 2011
backrow backrow is offline
Real Name: Anthony J. Bentley
Shell Scout
 
Join Date: Jul 2009
Location: Albuquerque, NM
Posts: 136
Default

Jacob Applebaum’s blog post on the subject is really informative.

Also, revocation doesn’t work.

There are some Firefox extensions that do Web of Trust or Trust on First Use for SSL certificates; I’m curious as to how well those work and if they can be generalized to work across the whole OS.

And the EFF has the “SSL Observatory” mailing list that may have more interesting discussion.

Affected domains:
  • login.live.com
  • mail.google.com
  • www.google.com
  • login.yahoo.com (3 certificates)
  • login.skype.com
  • addons.mozilla.org
__________________
Many thanks to the forum regulars who put time and effort into helping others solve their problems.
Reply With Quote