bugtraq - RE: OpenID/Debian PRNG/DNS Cache poisoning advisory

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 12 Aug 2008 10:55:53 +0200
From: "Clausen, Martin (DK - Copenhagen)" <mclausen@...oitte.dk>
To: "Eric Rescorla" <ekr@...workresonance.com>,
	"Ben Laurie" <benl@...gle.com>
Cc: <bugtraq@...urityfocus.com>, <security@...nid.net>,
	"OpenID List" <general@...nid.net>, <cryptography@...zdowd.com>,
	<full-disclosure@...ts.grok.org.uk>
Subject: RE: OpenID/Debian PRNG/DNS Cache poisoning advisory

You could use the SSL Blacklist plugin
(http://codefromthe70s.org/sslblacklist.asp) for Firefox or heise SSL
Guardian
(http://www.heise-online.co.uk/security/Heise-SSL-Guardian--/features/11
1039/) for IE to do this. If presented with a Debian key the show a
warning.

The blacklists are implemented using either a traditional blacklist
(text file) or distributed using DNS.

~martin

-----Original Message-----
From: owner-cryptography@...zdowd.com
[mailto:owner-cryptography@...zdowd.com] On Behalf Of Eric Rescorla
Sent: 8. august 2008 17:06
To: Ben Laurie
Cc: bugtraq@...urityfocus.com; security@...nid.net; OpenID List;
cryptography@...zdowd.com; full-disclosure@...ts.grok.org.uk
Subject: Re: OpenID/Debian PRNG/DNS Cache poisoning advisory

At Fri, 8 Aug 2008 11:50:59 +0100,
Ben Laurie wrote:
> However, since the CRLs will almost certainly not be checked, this 
> means the site will still be vulnerable to attack for the lifetime of 
> the certificate (and perhaps beyond, depending on user behaviour). 
> Note that shutting down the site DOES NOT prevent the attack.
> 
> Therefore mitigation falls to other parties.
> 
> 1. Browsers must check CRLs by default.

Isn't this a good argument for blacklisting the keys on the client side?

-Ekr

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to
majordomo@...zdowd.com
---------------------- Deloitte Disclaimer ---------------------
This message (including any attachments) contains confidential
information intended for a specific individual and purpose, and
is protected by law. If you are not the intended recipient, you
should delete this message and are hereby notified that any
disclosure, copying, or distribution of this message, or the
taking of any action based on it, is strictly prohibited.
----------------------------------------------------------------