User information of secure site and data scheme
Hello, Can anyone explain why with data sheme (data:image/gif;base64,...) for images (used in css) under https Firefox (3.5.2) said that some parts of page are unencrypted? I think that this is a bug, or should be a bug (have no sense). -- -- -- Publicidad y Servicios http://www.pas-world.com Directorio http://www.precioventa.com Tienda http://informatica.precioventa.com/es/ Autoridad certificadora http://ca.precioventa.com/es/ -- -- -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Adding certificate using certutil
I'm using certutil in order to add CA certificate to mozilla certificate store. When calling this utility as root, everything works fine - the certificate is really added. But, the problem is that I need to run this utility not as root. When I'm doing so, certutil fails. It returns the following error in a loop (only ctrl+c stop it): winscard_clnt.c:416:SCardsEstablishContextTH() Your pcscd is too old and does not support CMD_VERSION winscard_clnt.c:416:SCardsEstablishContextTH() Your pcscd is too old and does not support CMD_VERSION winscard_clnt.c:416:SCardsEstablishContextTH() Your pcscd is too old and does not support CMD_VERSION The command I'm running: certutil -A -n "VeriSign ..." -t c -t T -t C -i CA_Cert.cer -d /home/usr/.mozilla/firefox/hw01efrb.default/ I'm working with: Fedora 6 and FireFox 1.5. Does anyone know how can I overcome this problem? ___ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
"some parts are unencrypted", but what parts?
Hello, After test several pages with Firefox, in HTTPS mode. Why I can not know what part of page is unencrypted? I see a warning of "some parts are unencrypted", but what parts? A very big problem using data scheme under https downloaded page (old bug) but difficult to locate it first time. Same problem when certificate have change under one session of Firefox. Secure an "insecure", implies all secure or all insecure. I think that Firefox should say why the page is insecure or not. Regards, -- -- -- http://www.pas-world.com/ http://www.precioventa.com/ http://www.mayorista-informatica.com/ http://www.1pc.es/ -- -- -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
Re: "some parts are unencrypted", but what parts?
El jue, 15-04-2010 a las 14:14 +0100, Gervase Markham escribió: > > There are bookmarklets and greasemonkey scripts which will search for > and highlight the unencrypted content. > This does not seem really a Status of SSL connection. The question is, Why padlock is red (broken) ? The page is not the problem, for example, when server changes CA and certificate of SSL virtualhost or (IP + CA + certificate). After this, padlock is broken. Here is the problem, what parts of page are unencrypted ? If you use data:// the same problem... Page info it is not very useful here all content is SSL secured. I think that should be easy... SSL connection problems window: 1 - Certificate has change for same server error (code: 123456789) 2 - Link to http://example.org/ (code: 987654321) 3 - ... Web developer can know what is happen. At this, point what about normal user. For normal user all is secure or insecure, after n times of padlock broken, padlock "does not exist". Secure and "insecure" is all secure or insecure. The only thing that make page secure is laziness (add exception) in the fast internet, not user perception of secure or insecure. This is my opinion. Regards, -- -- -- http://www.pas-world.com/ http://www.precioventa.com/ http://www.mayorista-informatica.com/ http://www.1pc.es/ -- -- -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto