> Now, is there a safe way to implement this work-around? I'm not much > of a security wonk, so what can I check in the cert to accept only > Google's? I see properties like Issuer, Thumbprint, and > GetRawCertData. Can I use any of these to verify, or at least do > slightly more than "return true" for all certs?
Here you can find information on this subject: http://www.mono-project.com/UsingTrustedRootsRespectfully And also: http://www.mono-project.com/FAQ:_Security Miguel _______________________________________________ Mono-list maillist - [email protected] http://lists.ximian.com/mailman/listinfo/mono-list
