| |||||||||||||
China Internet Network Information Center accepted as a Mozilla root CAChina Internet Network Information Center accepted as a Mozilla root CAPosted Feb 3, 2010 22:46 UTC (Wed) by HenrikH (guest, #31152)Parent article: China Internet Network Information Center accepted as a Mozilla root CA
One way to prevent this man-in-the-middle-attack would be to make Firefox remember the hash of the public cert of the site. And on the next visit it could then present a warning if the public key had changed since the last visit (and the certs expiry date hasn't happened yet + check revocation list).
(Log in to post comments)
China Internet Network Information Center accepted as a Mozilla root CA Posted Feb 7, 2010 0:37 UTC (Sun) by jroysdon (guest, #63273) [Link]
Except certs expire, which is normal, and new certs replace them. You'd have to address that. MitM attacks would at least be possible when certs are close to expiring.
China Internet Network Information Center accepted as a Mozilla root CA Posted Feb 7, 2010 4:38 UTC (Sun) by jordanb (guest, #45668) [Link]
They shouldn't expire. They should be revokable, but they should never expire.
|
|||||||||||||