Re: [cryptography] OT: DigiNotar Certificates Are Pulled, but Not on Smartphones

2011-10-13 Thread Jeffrey Walton
On Sat, Sep 10, 2011 at 3:30 AM, Jeffrey Walton wrote: > On Thu, Sep 8, 2011 at 1:19 AM, Jeffrey Walton wrote: >> (As far as I know, Apple has not fixed their desktop/server software >> either. The folks that have to deal with it are still hacking >> solutions [1]. Its not a big surprise, since A

Re: [cryptography] OT: DigiNotar Certificates Are Pulled, but Not on Smartphones

2011-09-10 Thread Steven Bellovin
On Sep 10, 2011, at 3:30 11AM, Jeffrey Walton wrote: > On Thu, Sep 8, 2011 at 1:19 AM, Jeffrey Walton wrote: >> (As far as I know, Apple has not fixed their desktop/server software >> either. The folks that have to deal with it are still hacking >> solutions [1]. Its not a big surprise, since Ap

Re: [cryptography] OT: DigiNotar Certificates Are Pulled, but Not on Smartphones

2011-09-10 Thread Peter Gutmann
Jeffrey Walton writes: >Its not a big surprise, since Apple's PKI appears to be generally broken from >a programmer's perspective It's also quite badly broken from a standards-compliance perspective, it gets quite a number of things wrong. I was told that this was an artefact of their use of

Re: [cryptography] OT: DigiNotar Certificates Are Pulled, but Not on Smartphones

2011-09-10 Thread Jeffrey Walton
On Thu, Sep 8, 2011 at 1:19 AM, Jeffrey Walton wrote: > (As far as I know, Apple has not fixed their desktop/server software > either. The folks that have to deal with it are still hacking > solutions [1]. Its not a big surprise, since Apple's PKI appears to be > generally broken from a programmer

Re: [cryptography] OT: DigiNotar Certificates Are Pulled, but Not on Smartphones

2011-09-08 Thread Douglas Huff
On Sep 8, 2011 12:19 AM, "Jeffrey Walton" wrote: > On Tuesday neither Google nor Apple would comment on whether they plan > to revoke certificates issued by DigiNotar for Android or the iPhone, > even as desktop software makers pulled the plug on the Dutch company's > certificates. CyanogenMod h

[cryptography] OT: DigiNotar Certificates Are Pulled, but Not on Smartphones

2011-09-07 Thread Jeffrey Walton
(As far as I know, Apple has not fixed their desktop/server software either. The folks that have to deal with it are still hacking solutions [1]. Its not a big surprise, since Apple's PKI appears to be generally broken from a programmer's perspective [2]). http://www.pcworld.com/businesscenter/art