News for hackers. Stuff that matters.

A comment on Mozilla shipping SSL root certificate, has no idea how it got there. Parent comment

Re:Mozilla shipping SSL root certificate, has no idea how it... by dasrecht on Tuesday April 06, 2010 @10:18AM (#1244630)
yes this sould not be the core of the problem. its important to know _who_ owns the debatable CA.

This gives a great Mitm Vector if i'ts a malicious CA

[ Parent | on HN ]
Re:Mozilla shipping SSL root certificate, has no idea how it... by wallflower on Tuesday April 06, 2010 @10:42AM (#1244679)
Is it possible to do a web crawl scan of https and SSL certs and find out which certificates have this questionable one as their root?
[ Parent | on HN ]