Being safe on the internet (was Re: Here we go again - ISP DPI, but is it interception?)

Jon Ribbens jon+ukcrypto at unequivocal.co.uk
Mon Aug 2 12:00:24 BST 2010


On Mon, Aug 02, 2010 at 10:09:45AM +0100, Peter Tomlinson wrote:
> [1] I wish that Firefox would get its act together on certificate  
> checking (either fix it or tell me clearly if I can configure it  
> differently) - after getting a strong warning that the IAAC web site's  
> https certificate provider was not known, I contacted the organisation  
> and was told that they have a bona fide certificate from a bona fide CA  
> (was given the basic details).

Could you give an example URL? Personally I would not trust a CA if
Firefox doesn't know it. I wouldn't necessarily trust a CA if Firefox
*does* know it, for that matter, but we don't get much choice.



More information about the ukcrypto mailing list