Re: [Full-disclosure] [OT] Security in general using HTTPS
- From: Valdis.Kletnieks@xxxxxx
- Date: Thu, 22 Sep 2011 17:31:19 -0400
On Thu, 22 Sep 2011 18:01:10 -0300, Fosforo said:
Maybe not related to full disclosure in general, but anybody knows if there is a
way to track/identify the certificate authorities which "sold" these kind of
black boxes that changes HTTPS certificates on-the-fly, tracking users
without notice ?
See the EFF's 'SSL Observatory' project that just got some press exposure yesterday:
https://www.infoworld.com/t/encryption/eff-builds-system-warn-certificate-breaches-173602
https://www.eff.org/https-everywhere
Attachment:
pgpJpYQEepcoO.pgp
Description: PGP signature
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Follow-Ups:
- Re: [Full-disclosure] [OT] Security in general using HTTPS
- From: Jeffrey Walton
- Re: [Full-disclosure] [OT] Security in general using HTTPS
- References:
- [Full-disclosure] [OT] Security in general using HTTPS
- From: Fosforo
- [Full-disclosure] [OT] Security in general using HTTPS
- Prev by Date: [Full-disclosure] Multiple vulnerabilities in AWStats
- Next by Date: Re: [Full-disclosure] [OT] Security in general using HTTPS
- Previous by thread: [Full-disclosure] [OT] Security in general using HTTPS
- Next by thread: Re: [Full-disclosure] [OT] Security in general using HTTPS
- Index(es):
