-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 1/23/2014 7:33 PM, Jeffrey Walton wrote:
> Holy shit.... I can already imagine the fun Marlinspike or Kaminsky > is going to have abusing the validation mechanisms in programs for > X509 certs. > > Mozilla is going to have to start another list like the ccTLD > banned suffix list. > The fun is just starting. Even after 30 years we are just in our infancy. That is fantastic and horrifying at the same time. - - ferg - -- Paul Ferguson PGP Public Key ID: 0x54DC85B2 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREIAAYFAlLh6DYACgkQKJasdVTchbLkdQD/SOPTB6JAYCP76+AndIFQwJTd sHeOxQgYk/7AMxqjwLIA/0zAG8YV5lnH2clMSRg5LAGVj4LqW4l85a8KIVFIl4H8 =AZye -----END PGP SIGNATURE----- _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.