News for hackers. Stuff that matters.

A comment on Browser Vulnerability to Superfish: A Fact-Finding Trip to Best Buy [pdf]. Parent comment

Re:Browser Vulnerability to Superfish: A Fact-Finding Trip t... by beagle3 on Friday February 20, 2015 @12:39AM (#9079117)
They definitely can blacklist the certificate.

They have the choice of having HTTPS effectively useless (by leaving the certificate there), or making HTTPS not work (by removing it, thus prompting action from the user to fix it -- perhaps by calling their tech savvy nephew).

Browser vendors should (and usually do) err on the side of security.

[ Parent | on HN ]
Re:Browser Vulnerability to Superfish: A Fact-Finding Trip t... by Xylakant on Friday February 20, 2015 @04:54AM (#9079730)
Or the users just switch to a browser that works. IE or Chrome :(
[ Parent | on HN ]
Re:Browser Vulnerability to Superfish: A Fact-Finding Trip t... by beagle3 on Friday February 20, 2015 @09:04AM (#9080410)
Most Firefox users switched away from those (or didn't switch to them) because it works better for them - including security wise. I suspect that won't be their first course of action.
[ Parent | on HN ]