Re: Mozilla tool to self-verify HTTPS site

2003-06-24 Thread Ian Grigg
[EMAIL PROTECTED] wrote: > How many users can remember MD5 checksums??? If they were rendered into > something pronounceable via S/Key like dictionaries it might be more > useful... You forgot this bit: > It's a small step for the user, but a giant leap > for userland security. It means that so

Re: Mozilla tool to self-verify HTTPS site

2003-06-24 Thread Victor . Duchovni
On Tue, 24 Jun 2003, Ian Grigg wrote: > http://sslbar.metropipe.net/ > > Fantastic news: coders are starting to work > on the failed security model of secure browsing > and improve it where it matters, in the browser. > > This plugin for Mozilla shows the SSL certificate's > fingerprint on the we

Re: New toy: SSLbar

2003-06-24 Thread Steven M. Bellovin
>It's a toolbar for Mozilla (and related web browsers) that automatically >displays the SHA1 or MD5 fingerprint of the SSL certificate when you visit >an SSL secured web site. You could of course click the little padlock icon >and dig through a couple of dialogs to see it, but it's much easier

Mozilla tool to self-verify HTTPS site

2003-06-24 Thread Ian Grigg
http://sslbar.metropipe.net/ Fantastic news: coders are starting to work on the failed security model of secure browsing and improve it where it matters, in the browser. This plugin for Mozilla shows the SSL certificate's fingerprint on the web browser's toolbar. It's a small step for the user,

New toy: SSLbar

2003-06-24 Thread Steve Schear
It's a toolbar for Mozilla (and related web browsers) that automatically displays the SHA1 or MD5 fingerprint of the SSL certificate when you visit an SSL secured web site. You could of course click the little padlock icon and dig through a couple of dialogs to see it, but it's much easier when

DIMACS Tutorial on Applied Cryptography and Network Security: NJ, Aug 4-7

2003-06-24 Thread Amir Herzberg
During August 4-7, I'll give, together with Markus Jakobsson, Angelos Keromytis, Hugo Krawczyk, and Rebecca Wright, a `crash course on cryptography and its applications to secure networking and electronic commerce`, in DIMACS (located in Piscataway, central New Jersey). For details, program etc