Gervase Markham wrote:
[...]
We just turned hostname display UI for SSL on, according to The Burning
Edge...
This is a nice change, I found out about it on the burning edge too :-)
But, and as the link Eddy just reported shows, the attack is far from
being only for SSL.
I think we should reconsider the options available to make the domain
name more visible for http connexions.
What about a white version of the hostname display for http sites ?
_______________________________________________
dev-security mailing list
dev-security@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security
