full-disclosure - HTTP AUTH BASIC monowall.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20060315191903.GE4422@sentinelchicken.org>
Date: Wed Mar 15 19:19:12 2006
From: tim-security at sentinelchicken.org (Tim)
Subject: HTTP AUTH BASIC monowall.

> Hence, why I want a technology to protect data and not a human being.

Wouldn't we all like that...  Sorry to break it to you, but it doesn't
exist.

In the interim, lobby your browser vendor to remove the ability to use
an SSLed webserver whose certificate isn't valid/trusted.  Then if you
remove your users' ability to change CA trust, you've gone a long way in
fixing the REAL problem you are trying to solve.

cheers,
tim