Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
| From | Marko Rauhamaa <marko@pacujo.net> |
|---|---|
| Newsgroups | comp.misc |
| Subject | Re: Lauren Weinstein on "trusted proxies" |
| Date | 2014-02-27 01:00 +0200 |
| Organization | A noiseless patient Spider |
| Message-ID | <87bnxtscn3.fsf@elektro.pacujo.net> (permalink) |
| References | <rswood-78BB87.22471723022014@189-82-4-46.user.veloxzone.com.br> <slrnlgmj3c.1td.catwheezel@ID-107770.user.individual.net> <vv0vta-uhd.ln1@7398004cd8ad880124144d3c685567d7.anonymous> <slrnlgq6v5.5fr.catwheezel@ID-107770.user.individual.net> <ra72ua-09k.ln1@7398004cd8ad880124144d3c685567d7.anonymous> |
"q.kontinuum" <achsis_of_elvis@yahoo.co.uk>:
> But the certificate is usually bound to a domain name. So, if I visit
> https://bank.com, the attacker needs a certifficate issued for
> bank.com to fool my browser. (Or at least he needs to redirect me
> somehow to https://bamk.com and own a certificate of *that* site.)
There are numerous companies whose certificates are given the green
light by the web browsers. You need to find the certificate authority
with least scruples to gain a valid certificate for a domain.
I was once involved in buying a certificate for a domain. I supplied
information to a web form. They accepted the application after verifying
that my application was legitimate.
How did they verify my application was legitimate? I satisfied their two
stringent requirements:
1. They received the payment.
2. I picked up the phone when they called the number I had entered on
the certificate application form.
IOW, all a valid certificate proves is it has been paid for.
Marko
Back to comp.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Lauren Weinstein on "trusted proxies" RS Wood <rswood@therandymon.com> - 2014-02-23 22:47 +0000
Re: Lauren Weinstein on "trusted proxies" Whiskers <catwheezel@operamail.com> - 2014-02-24 13:43 +0000
Re: Lauren Weinstein on "trusted proxies" Bjoern Hoehrmann <bjoern@hoehrmann.de> - 2014-02-24 16:30 +0100
Re: Lauren Weinstein on "trusted proxies" Dave Garland <dave.garland@wizinfo.com> - 2014-02-24 10:39 -0600
Re: Lauren Weinstein on "trusted proxies" "q.kontinuum" <achsis_of_elvis@yahoo.co.uk> - 2014-02-25 18:37 +0100
Re: Lauren Weinstein on "trusted proxies" Whiskers <catwheezel@operamail.com> - 2014-02-25 22:40 +0000
Re: Lauren Weinstein on "trusted proxies" "q.kontinuum" <achsis_of_elvis@yahoo.co.uk> - 2014-02-26 23:44 +0100
Re: Lauren Weinstein on "trusted proxies" Marko Rauhamaa <marko@pacujo.net> - 2014-02-27 01:00 +0200
Re: Lauren Weinstein on "trusted proxies" "q.kontinuum" <achsis_of_elvis@yahoo.co.uk> - 2014-02-27 06:12 +0100
Re: Lauren Weinstein on "trusted proxies" Marko Rauhamaa <marko@pacujo.net> - 2014-02-27 08:48 +0200
Re: Lauren Weinstein on "trusted proxies" Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-02-27 08:35 +0000
Re: Lauren Weinstein on "trusted proxies" Marko Rauhamaa <marko@pacujo.net> - 2014-02-27 11:01 +0200
Re: Lauren Weinstein on "trusted proxies" Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-02-27 15:07 +0000
Re: Lauren Weinstein on "trusted proxies" "q.kontinuum" <achsis_of_elvis@yahoo.co.uk> - 2014-02-28 08:06 +0100
Re: Lauren Weinstein on "trusted proxies" Marko Rauhamaa <marko@pacujo.net> - 2014-02-28 10:02 +0200
Re: Lauren Weinstein on "trusted proxies" "q.kontinuum" <achsis_of_elvis@yahoo.co.uk> - 2014-02-28 09:24 +0100
Re: Lauren Weinstein on "trusted proxies" Marko Rauhamaa <marko@pacujo.net> - 2014-02-28 12:04 +0200
Re: Lauren Weinstein on "trusted proxies" Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-02-28 11:31 +0000
csiph-web