Re: Legacy Root Certificates

2007-04-03 Thread David E. Ross
Kyle Hamilton wrote: > Why would Network Solutions be signed by AddTrust? Network Solutions > owns Verisign. > > You might want to verify out-of-band that the bank's site really does > belong to the appropriate bank. > > -Kyle H > > On 4/2/07, David E. Ross <[EMAIL PROTECTED]> wrote: >> Quite s

SSL Client

2007-04-03 Thread Umesh Bywar
Hi all: I am trying to write an interceptor proxy as an extension to mozilla. It is something similar to webscarab or paros. I am facing a problem while browsing some HTTPS sites that use SSLv3 speciafically when I chain another proxy like squid with my own proxy. The reason for this is as

Re: Legacy Root Certificates

2007-04-03 Thread Kaspar Brand
Kyle Hamilton wrote: > Why would Network Solutions be signed by AddTrust? Network Solutions > owns Verisign. Not really true... and actually, it was the other way round: Verisign owned Network Solutions - from June 2000 to November 2003, when they sold it to Pivotal Equity. And recently (in Febru

Re: Legacy Root Certificates

2007-04-03 Thread Kyle Hamilton
Why would Network Solutions be signed by AddTrust? Network Solutions owns Verisign. You might want to verify out-of-band that the bank's site really does belong to the appropriate bank. -Kyle H On 4/2/07, David E. Ross <[EMAIL PROTECTED]> wrote: > Quite some time ago, I disabled root certificat

Re: Legacy Root Certificates

2007-04-03 Thread Gervase Markham
David E. Ross wrote: > Are there any plans to examine legacy root certificates that are > currently installed with Mozilla products? Will they be subjected to > the same rigorous criteria that are required for proposed new > certificates? That's a good question. We are currently focussing on clea