User information of secure site and data scheme

2009-08-16 Thread Developer
Hello,

Can anyone explain why with data sheme (data:image/gif;base64,...) for
images (used in css) under https Firefox (3.5.2) said that some parts of
page are unencrypted?
I think that this is a bug, or should be a bug (have no sense).



-- 














--
--
Publicidad y Servicios http://www.pas-world.com
Directorio http://www.precioventa.com
Tienda http://informatica.precioventa.com/es/
Autoridad certificadora http://ca.precioventa.com/es/
--
--

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Adding certificate using certutil

2007-08-12 Thread Developer
I'm using certutil in order to add CA certificate to mozilla certificate 
store.

When calling this utility as root, everything works fine - the certificate 
is really added.

But, the problem is that I need to run this utility not as root. When I'm 
doing so, certutil fails. It returns the following error in a loop (only 
ctrl+c stop it):

winscard_clnt.c:416:SCardsEstablishContextTH() Your pcscd is too old and 
does not support CMD_VERSION

winscard_clnt.c:416:SCardsEstablishContextTH() Your pcscd is too old and 
does not support CMD_VERSION

winscard_clnt.c:416:SCardsEstablishContextTH() Your pcscd is too old and 
does not support CMD_VERSION





The command I'm running:

certutil -A -n "VeriSign ..." -t c -t T -t C -i CA_Cert.cer -d 
/home/usr/.mozilla/firefox/hw01efrb.default/

I'm working with: Fedora 6 and FireFox 1.5.



Does anyone know how can I overcome this problem?




___
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


"some parts are unencrypted", but what parts?

2010-04-14 Thread Developer
Hello,
After test several pages with Firefox, in HTTPS mode.

Why I can not know what part of page is unencrypted?
I see a warning of "some parts are unencrypted", but what parts?
A very big problem using data scheme under https downloaded page (old
bug) but difficult to locate it first time.
Same problem when certificate have change under one session of Firefox.

Secure an "insecure", implies all secure or all insecure.

I think that Firefox should say why the page is insecure or not.

Regards,



-- 














--
--
http://www.pas-world.com/
http://www.precioventa.com/
http://www.mayorista-informatica.com/
http://www.1pc.es/
--
--

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto


Re: "some parts are unencrypted", but what parts?

2010-04-15 Thread Developer
El jue, 15-04-2010 a las 14:14 +0100, Gervase Markham escribió:
> 
> There are bookmarklets and greasemonkey scripts which will search for 
> and highlight the unencrypted content.
> 

This does not seem really a Status of SSL connection.
The question is, Why padlock is red (broken) ?

The page is not the problem, for example, when server changes CA and
certificate of SSL virtualhost or (IP + CA + certificate).
After this, padlock is broken. Here is the problem, what parts of page
are unencrypted ? If you use data:// the same problem...
Page info it is not very useful here all content is SSL secured.

I think that should be easy...

SSL connection problems window:
1 - Certificate has change for same server error (code: 123456789)
2 - Link to http://example.org/ (code: 987654321)
3 - ...

Web developer can know what is happen.

At this, point what about normal user.
For normal user all is secure or insecure, after n times of padlock
broken, padlock "does not exist".

Secure and "insecure" is all secure or insecure.

The only thing that make page secure is laziness (add exception) in the
fast internet, not user perception of secure or insecure.


This is my opinion.
Regards,






-- 














--
--
http://www.pas-world.com/
http://www.precioventa.com/
http://www.mayorista-informatica.com/
http://www.1pc.es/
--
--

-- 
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto