Mailinglist Archive: opensuse-factory (837 mails)

[Cristian Rodríguez <crrodriguez@xxxxxxxxxxxx>]

El 23/03/11 23:45, Robert Kaiser escribió:

> No user should be able to
> override the security certificate unless (s)he knows exactly that this
> breaks every security assumption and is very probably an attack if it
> happens on a high-volume site.

It doesnt really matter that much, certificate authorities are already
issuing ilegit certificates, most recently affecting
skype,gmail,live.com..etc...

http://www.microsoft.com/technet/security/advisory/2524375.mspx

And, firefox accept certificates from the Chinese goverment.. uh ho.

Talking about false sense of security here.




-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx