Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #3393

Re: I wish I understood SSL Certificates better when they ask

From Werner Obermeier <spamfreewob@arcor.de>
Newsgroups alt.os.linux, comp.os.linux.networking, alt.windows7.general
Subject Re: I wish I understood SSL Certificates better when they ask
Date 2015-06-14 20:05 +0000
Organization solani.org
Message-ID <mlkmq9$baf$1@solani.org> (permalink)
References (3 earlier) <cu1v5kFepeU1@mid.individual.net> <mlidog$tv4$2@solani.org> <cu5ptiFu5fsU1@mid.individual.net> <mlkc4k$10t$3@solani.org> <wwvh9qa42jw.fsf@l1AntVDjLrnP7Td3DQJ8ynzIq3lJMueXf87AxnpFoA.invalid>

Cross-posted to 3 groups.

Show all headers | View raw

Richard Kettlewell <rjk@greenend.org.uk> wrote in
wwvh9qa42jw.fsf@l1AntVDjLrnP7Td3DQJ8ynzIq3lJMueXf87AxnpFoA.invalid:

> Yes, in the sense that attackers do modify the list of root CAs, given
> the opportunity.  For example:
> https://en.wikipedia.org/wiki/Superfish#Lenovo_security_incident

Apparently, in 2015, the US government advised uninstalling that software 
that came bundled with Lenovo products because of a root certificate 
security issue.

"The installation included a universal self-signed certificate authority; 
the certificate authority allows a man-in-the-middle attack to introduce 
ads even on encrypted pages. The certificate authority had the same 
private key across laptops; this allows third-party eavesdroppers to 
intercept or modify HTTPS secure communications without triggering 
browser warnings by either extracting the private key or using a self-
signed certificate.[4][7][19][20] On February 20, 2015, Microsoft 
released an update for Windows Defender which removes Superfish"

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-12 23:36 +0000
  Re: I wish I understood SSL Certificates better when they ask Wildman <best_lay@yahoo.com> - 2015-06-12 23:51 +0000
    Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 05:21 +0000
  Re: I wish I understood SSL Certificates better when they ask Bit Twister <BitTwister@mouse-potato.com> - 2015-06-13 02:41 +0000
    Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 05:42 +0000
      Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 23:24 +0000
  Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 05:13 +0000
    Re: I wish I understood SSL Certificates better when they ask Richard Kettlewell <rjk@greenend.org.uk> - 2015-06-13 10:01 +0100
    Re: I wish I understood SSL Certificates better when they ask Thomas Richter <thor@math.tu-berlin.de> - 2015-06-13 13:21 +0200
      Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 23:21 +0000
    Re: I wish I understood SSL Certificates better when they ask Ian Zimmerman <itz@buug.org> - 2015-06-13 10:46 -0700
    Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-13 23:18 +0000
      Re: I wish I understood SSL Certificates better when they ask "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2015-06-13 20:30 -0400
        Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-14 02:12 +0000
          Re: I wish I understood SSL Certificates better when they ask "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2015-06-13 22:43 -0400
      Re: I wish I understood SSL Certificates better when they ask William Unruh <unruh@invalid.ca> - 2015-06-14 00:40 +0000
        Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-14 02:12 +0000
          Re: I wish I understood SSL Certificates better when they ask "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2015-06-13 22:39 -0400
            Re: I wish I understood SSL Certificates better when they ask William Unruh <unruh@invalid.ca> - 2015-06-14 02:49 +0000
      Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-14 20:05 +0000
        Re: I wish I understood SSL Certificates better when they ask Werner Obermeier <spamfreewob@arcor.de> - 2015-06-14 22:49 +0000
          Re: I wish I understood SSL Certificates better when they ask Richard Kettlewell <rjk@greenend.org.uk> - 2015-06-15 00:31 +0100

csiph-web