Ian G wrote:

> And what does Firefox do when it sees a *.com
> cert?  If it is acceptable as a cert, then I'd strongly
> suggest looking closely at how to reveal this very
> powerful cert in the status bar.

I actually made this point the other day, say someone issues the chinese
govt a cert for "*" what security benefit is there in seeing the host
name...

-- 

Best regards,
 Duane

http://www.cacert.org - Free Security Certificates
http://www.nodedb.com - Think globally, network locally
http://www.sydneywireless.com - Telecommunications Freedom
http://happysnapper.com.au - Sell your photos over the net!
http://e164.org - Using Enum.164 to interconnect asterisk servers

"In the long run the pessimist may be proved right,
    but the optimist has a better time on the trip."
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to