Networking Forums

Networking Forums > Wireless Networking > Wireless Internet > How to identify & protect from hacked SSL MD5 certificates

Reply
Thread Tools Display Modes

How to identify & protect from hacked SSL MD5 certificates

 
 
Pat
Guest
Posts: n/a

 
      12-31-2008, 04:51 AM
When I look at my "certificates" in Firefox, for Gmail, for example, it
says SHA1 fingerprint and MD5 fingerprint, e.g., for Thawte SGC CA (i.e.,
mail.google.com).

Does this mean this is a site that can easily be compromised?

If so, what do we do in Firefox 3.0.5 on Windows to protect from a spoofed
site?
 
Reply With Quote
 
 
 
 
pattilucero@sbcglobal.net
Guest
Posts: n/a

 
      12-31-2008, 06:44 AM
On Tue, 30 Dec 2008 22:18:30 -0800, (E-Mail Removed) wrote:

> Is there a way to protect ourselves today from this flaw?


I found the answer. Yes. We have to look inside the certificate to see the
"tumor", which is relatively easy to find once you know what to look for.

Mozilla did release an advisory
http://blog.mozilla.com/security/200...icate-forgery/
 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
WPA Hacked? Jack Simmons Wireless Networks 7 11-14-2008 02:26 AM
wpa wireless hacked ? Marky Broadband 8 08-23-2005 02:19 PM
Micrsoft hacked ????? Marky Broadband 6 05-08-2005 01:38 PM
Is my wireless net being hacked? Koogs Broadband Hardware 1 10-19-2004 02:19 AM
hacked me? ? ? Peter Linux Networking 0 10-30-2003 03:00 PM



1 2 3 4 5 6 7 8 9 10 11