Re: Can I add more than one e-mail addresses as subjAltName extionsion in X.509 cert

2010-05-17 Thread Jean-Marc Desperrier
Eddy Nigg wrote: - Do other applications (like thunderbird and other mail), would make sure that they search through all the e-mail addresses to look for a match? Yes, this appears to be the case. IIRC, they do but they are some place where only one adresse will be printed, the first of

The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread johnjbarton
Cormac Herley provides a detailed exploration of dangers of inappropriate security warnings: https://docs.google.com/viewer?url=http%3A%2F%2Fresearch.microsoft.com%2Fen-us%2Fum%2Fpeople%2Fcormac%2Fpapers%2F2009%2Fsolongandnothanks.pdfpli=1 or here is the short URL http://bit.ly/9flIbJ Check

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread Nelson B Bolyard
On 2010-05-17 08:41 PDT, johnjbarton wrote: Cormac Herley provides a detailed exploration of dangers of inappropriate security warnings: https://docs.google.com/viewer?url=http%3A%2F%2Fresearch.microsoft.com%2Fen-us%2Fum%2Fpeople%2Fcormac%2Fpapers%2F2009%2Fsolongandnothanks.pdfpli=1 Why

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread Eddy Nigg
On 05/17/2010 08:31 PM, From johnjbarton: It's so true. If you really want to disable all security warnings, there is a Firefox extension that will do it. Just use it. Maybe you could even improve it to display dancing pigs! The quote above was taken out of context. The remaining

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread Marsh Ray
On 5/17/2010 12:59 PM, Eddy Nigg wrote: On 05/17/2010 08:31 PM, From johnjbarton: It's so true. If you really want to disable all security warnings, there is a Firefox extension that will do it. Just use it. Maybe you could even improve it to display dancing pigs! The quote above was

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread Nelson B Bolyard
On 2010-05-17 10:31 PDT, johnjbarton wrote: On 5/17/2010 10:23 AM, Nelson B Bolyard wrote: My favorite quote: Given a choice between dancing pigs and security, users will pick dancing pigs every time. It's so true. If you really want to disable all security warnings, there is a

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread Robert Relyea
Check esp. section 7.6 So What Can We Do?. This paper is about a year old, and we discussed it here when it was now. My favorite quote: Given a choice between dancing pigs and security, users will pick dancing pigs every time. The quote above was taken out of context. The

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread Eddy Nigg
On 05/17/2010 09:25 PM, From Marsh Ray: This is half in jest, but half serious too. There may be something here. Imagine how fast sites would fix their certs if the scary page proposed keyword alternative sites that did not have cert issues. Truly evil :-) -- Regards Signer: Eddy Nigg,

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread johnjbarton
On 5/17/2010 11:58 AM, Nelson B Bolyard wrote: On 2010-05-17 10:31 PDT, johnjbarton wrote: On 5/17/2010 10:23 AM, Nelson B Bolyard wrote: My favorite quote: Given a choice between dancing pigs and security, users will pick dancing pigs every time. It's so true. If you really want

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread Kurt Seifried
Wow, now that is over the top! How incredibly obnoxious. So the view of mozilla.org is that their users are incompetent fools. I wonder why you care about security for these 'idiots'? Not everyone on this list speaks on behalf of Mozilla.org (I certainly don't) and even within Mozilla.org I'm

Re: The Rational Rejection of Security Advice by Users by Cormac Herley

2010-05-17 Thread johnjbarton
On 5/17/2010 9:41 PM, Kurt Seifried wrote: The reason we have so many problems is this: Security is hard. Lots of things about computing are hard. The path to improvement is in looking for ways to make the systems easier to operate properly. A place to start is a little respect for