<br><br><div class="gmail_quote">On 5 February 2011 18:27, M J D Brown <span dir="ltr"><<a href="mailto:mjdb@dorevale.demon.co.uk">mjdb@dorevale.demon.co.uk</a>></span> wrote:<br><div> </div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
LAN which<br>
is hiding behind a hardware firewall that Shields Up does not penetrate.<br></blockquote><div><br>Speaking as an ex-pen tester, I'm really not certain that this is a properly effective security test ...<br> <br></div>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Accordingly I approved the request. As a rhetorical question: was I<br>
misguided?<br>
<br>
It would seem that there is a fair concensus that the present system<br>
cannot be trusted at a technical level.<br></blockquote><div><br>But here you know the CA - the NAS - and you have physical control of it. You are trusting it for the issue of one certificate. Yes, somebody could have subverted the NAS firmware in order to attack you but it is quite a significant attack. Does anybody want what you have got that much?<br>
<br><br>Matthew</div></div><br clear="all"><br>-- <br>Matthew Pemble<br><br><br>