[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
bug#16978: 24.3; SSL/TLS with multiple man-in-the-middle vulnerabilities
|
From: |
Lars Magne Ingebrigtsen |
|
Subject: |
bug#16978: 24.3; SSL/TLS with multiple man-in-the-middle vulnerabilities |
|
Date: |
Mon, 24 Mar 2014 13:14:49 +0100 |
|
User-agent: |
Gnus/5.13001 (Ma Gnus v0.10) Emacs/24.3.50 (gnu/linux) |
Ted Zlatanov <tzz@lifelogs.com> writes:
> On Thu, 20 Mar 2014 15:39:28 +0100 Lars Magne Ingebrigtsen
> <larsi@gnus.org> wrote:
>
> LMI> Ted Zlatanov <tzz@lifelogs.com> writes:
>>> I think the self-signed certificates are the one we can omit, it's a
>>> fairly rare use case.
>
> LMI> No, it's quite common for mail servers and the like.
>
> OK. With a certificate manager UI, do you think this use case is
> handled as I proposed, or do we need a more thorough solution here?
No, a certificate manager UI is just what we need. >"?
--
(domestic pets only, the antidote for overdose, milk.)
bloggy blog: http://lars.ingebrigtsen.no