News for hackers. Stuff that matters.
Re:An update on attempted man-in-the-middle attacks by dpark on Tuesday August 30, 2011 @10:44AM (#2941636)
There are much better ways to notify users than trying to convince them of the value of monitoring their bank's CA. The browser could simply keep track of the cert and notify the user if it changes unexpectedly. This doesn't require the user to understand anything new, and it still works in the case that the fraudulent cert is signed by Verisign.

There are no comments on this comment yet.