Advertisement
Front, Kernel, Security, Distributions, Development. See your byline here on LWN.net.
| |||||||||||||
|
| |||||||||||||
Cache poisoning vulnerability found in BINDCache poisoning vulnerability found in BINDPosted Jul 26, 2007 13:13 UTC (Thu) by nix (subscriber, #2304)In reply to: Cache poisoning vulnerability found in BIND by elanthis Parent article: Cache poisoning vulnerability found in BIND
SSL solves it? Not hardly, given that huge numbers of sites use outdated certs and a lot use self-signing. Most people just click 'accept' when asked: they certainly don't look at the cert's content, and even if they did, would they be able to spot a false one, what with VeriSign and others doing minimal verification of applicant identity beyond `do they have a credit card'. (Credit cards are, after all, so very had to get: my friend's daughter could have half a dozen by now, and she's less than a year old).
(Log in to post comments)
|
|
||||||||||||