bugtraq - Re: etax 2010 failure to validate remote ssl certificate properly

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 8 Sep 2010 05:17:18 +1000
From: dave b <db.pub.mail@...il.com>
To: bugtraq@...urityfocus.com
Subject: Re: etax 2010 failure to validate remote ssl certificate properly

On 8 September 2010 05:09, dave b <db.pub.mail@...il.com> wrote:
> etax 2010[0]

Minor edit :)
"> (note: you need a certificate for _any_ domain signed by a CA"
should be:
"> (note: you need a certificate for a domain that has been signed by
a signed by a CA installed on the client pc"
i.e. a certificate for https://foo.com that works on the client :)

--
An honest tale speeds best being plainly told.		-- William
Shakespeare, "Henry VI"