Re: Insufficient Verification of Client Certificates in IIS 5.0 pre sp3
From: Johan Persson (orm@SENTOR.SE)Date: 08/20/02
- Previous message: http-equiv@excite.com: "killer k00kie [was Re: SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0]"
- Maybe in reply to: Johan Persson: "Insufficient Verification of Client Certificates in IIS 5.0 pre sp3"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 20 Aug 2002 10:00:38 +0200 From: Johan Persson <orm@SENTOR.SE> To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM
Hi all.
Sorry about replying to my own mail....
A lot of people have been mailing me about this issue. Most people want to
know where the fix is documented in sp3. Some report that the issue is still
present even with sp3 installed. This is my reply:
To the best of my knowledge the issue is not documented anywhere, yet.
Microsoft tells me that they will issue a statement shortly, as soon as they
have investigated the matter thoroughly. I suppose there are other problems
that need to be addressed as well.
I haven't personally checked that the fix is included in sp3 although
Microsoft representatives assures me that this is the case, reason being
that I developed a workaround for the particular application that I was
working on when I discovered the problem and we haven't installed sp3 yet.
/johan
- Previous message: http-equiv@excite.com: "killer k00kie [was Re: SILLY BEHAVIOR : Internet Explorer 5.5 - 6.0]"
- Maybe in reply to: Johan Persson: "Insufficient Verification of Client Certificates in IIS 5.0 pre sp3"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
