On Mon, 2010-05-17 at 13:25 -0500, Marsh Ray wrote:
> Imagine how fast sites would fix their certs if the scary page proposed
> keyword alternative sites that did not have cert issues.

You can't assume that it's the site's fault.  A competitor could be
MITM-ing the connection and showing a bad certificate in order to have
the browser suggest the competitor's site.

-- 
Matt

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to