1995-09-25 - Re: SSL Man-in-the-middle
Header Data
From: jsw@neon.netscape.com (Jeff Weinstein)
To: cypherpunks@toad.com
Message Hash: 5483fab1c97cd84229914fd239763b26dd046105ec51efc851bd6c5a3cac9ec0
Message ID: <447bes$7ai@tera.mcom.com>
Reply To: <199509251247.IAA27297@gatekeeper.itribe.net>
UTC Datetime: 1995-09-25 22:46:44 UTC
Raw Date: Mon, 25 Sep 95 15:46:44 PDT
Raw message
From: jsw@neon.netscape.com (Jeff Weinstein)
Date: Mon, 25 Sep 95 15:46:44 PDT
To: cypherpunks@toad.com
Subject: Re: SSL Man-in-the-middle
In-Reply-To: <199509251247.IAA27297@gatekeeper.itribe.net>
Message-ID: <447bes$7ai@tera.mcom.com>
MIME-Version: 1.0
Content-Type: text/plain
In article <Pine.SOL.3.91.950925124443.359B-100000@chivalry>, ses@tipper.oit.unc.edu (Simon Spero) writes:
> Exactly - the trust model used in Navigator 1.1N requires you to trust
> every single owner of a valid certificate. Getting hold of any key is
> vastly easier than having to obtain a specific key; in the worst case,
> you just buy your own - SSL exchanges are repudiable, and a few simple
> tricks can make sure you cerificiate doesn't show up in the "Document
> Information" dialog box.
Can you explain to me how you would get the Navigator to accept your
certificate, but not display anything in the "Document Information"
dialog?
--Jeff
--
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.
Thread
Return to September 1995
- Return to ““David J. Bianco” <bianco@itribe.net>”
- Return to “Eric Young <eay@mincom.oz.au>”
- Return to “Jeff Barber <jeffb@sware.com>”
- Return to “jsw@neon.netscape.com (Jeff Weinstein)”
Return to “Simon Spero <ses@tipper.oit.unc.edu>”
- 1995-09-22 (Fri, 22 Sep 95 07:10:59 PDT) - SSL Man-in-the-middle - “David J. Bianco” <bianco@itribe.net>
- 1995-09-23 (Sat, 23 Sep 95 10:41:57 PDT) - Re: SSL Man-in-the-middle - “David J. Bianco” <bianco@itribe.net>
- 1995-09-25 (Sun, 24 Sep 95 17:47:19 PDT) - Re: SSL Man-in-the-middle - Eric Young <eay@mincom.oz.au>
- 1995-09-25 (Mon, 25 Sep 95 10:10:14 PDT) - Re: SSL Man-in-the-middle - “David J. Bianco” <bianco@itribe.net>
- 1995-09-25 (Mon, 25 Sep 95 12:53:39 PDT) - Re: SSL Man-in-the-middle - Simon Spero <ses@tipper.oit.unc.edu>
- 1995-09-25 (Mon, 25 Sep 95 14:13:36 PDT) - Re: SSL Man-in-the-middle - Jeff Barber <jeffb@sware.com>
- 1995-09-25 (Mon, 25 Sep 95 15:46:44 PDT) - Re: SSL Man-in-the-middle - jsw@neon.netscape.com (Jeff Weinstein)
- 1995-09-26 (Tue, 26 Sep 95 06:32:16 PDT) - Re: SSL Man-in-the-middle - Simon Spero <ses@tipper.oit.unc.edu>
- 1995-09-25 (Mon, 25 Sep 95 12:53:39 PDT) - Re: SSL Man-in-the-middle - Simon Spero <ses@tipper.oit.unc.edu>
- 1995-09-25 (Mon, 25 Sep 95 10:10:14 PDT) - Re: SSL Man-in-the-middle - “David J. Bianco” <bianco@itribe.net>