Wan-Teh Chang wrote, On 2008-08-22 10:02: > On Thu, Aug 21, 2008 at 10:43 AM, Daniel Stenberg <[EMAIL PROTECTED]> wrote: >> On Thu, 21 Aug 2008, Wan-Teh Chang wrote: >> >>> Did you get your Firefox release from www.mozilla.com or from your Linux >>> distribution? >> I did say NSS 3.12, Firefox 3.01 and Debian Linux. > > If you get your NSS 3.12 from Debian Linux, you need to get the > NSS source package from Debian and examine its patches. > Debian adds the SPI Inc. and CAcert.org CA certificates to > certdata.txt. See the 95_add_spi+cacert_ca_certs.dpatch patch in > https://bugzilla.mozilla.org/show_bug.cgi?id=448792
Right, and because they've altered the root CA list, they're not allowed to call their version "Firefox". That's why they call it "Ice Ape" or "Ice Weasel" or something like that, I believe. Daniel claimed he was running Firefox. If he's running a browser with the Debian root list and the brand name Firefox, then somebody is in trouble (not Daniel :). _______________________________________________ dev-tech-crypto mailing list [email protected] https://lists.mozilla.org/listinfo/dev-tech-crypto

