Re: selling the MITM

2009-01-14 Thread Michael Ströder
Ian G wrote: > On 10/1/09 17:57, Ian G wrote: >> On 10/1/09 00:48, someone wrote: > >>> I'm asking you is this by any means legal? > > > My off-the-cuff entirely not-a-lawyer answer: I think this is different in different countries. E.g. in general Germany is a little bit stricter regarding pri

Re: selling the MITM

2009-01-12 Thread Kyle Hamilton
On Mon, Jan 12, 2009 at 2:02 AM, Jean-Marc Desperrier wrote: > Daniel Stenberg wrote: >> >> [...] >> I've been curious on how these devices deal with self-signed >> certificates. Does anyone know? >> >> I mean does it hide them the same way or does it generate fake >> self-signed ones for those? >

Re: selling the MITM

2009-01-12 Thread Jean-Marc Desperrier
Daniel Stenberg wrote: [...] I've been curious on how these devices deal with self-signed certificates. Does anyone know? I mean does it hide them the same way or does it generate fake self-signed ones for those? Hum, hum. So helping user detect MITM attacks could be as simple as telling them

Re: selling the MITM

2009-01-12 Thread Daniel Stenberg
On Sat, 10 Jan 2009, Nelson B Bolyard wrote: http://www.ssl-inspector.com/ Others: http://www.finjan.com/content.aspx?id=190 http://www.breach.com/assets/files/downloads/breachviewssl_whitepaper.pdf http://hosteddocs.ittoolbox.com/541_BlueCoat_SSL_Accel_wp_v3d.pdf http://www.accusys.com/BCS_S

Re: selling the MITM

2009-01-10 Thread Ian G
On 10/1/09 17:57, Ian G wrote: On 10/1/09 00:48, someone wrote: I'm asking you is this by any means legal? My off-the-cuff entirely not-a-lawyer answer: Yes: in a company, they own or control all the assets, so they can distro the MITM root key at their behest. No: Privacy regulator

Re: selling the MITM

2009-01-10 Thread Nelson B Bolyard
Nelson B Bolyard wrote, On 2009-01-10 13:07: > Ian G wrote, On 2009-01-10 08:57: >> On 10/1/09 00:48, someone wrote: >>> But, have you seen this article: >>> http://www.informationweek.com/news/hardware/reviews/showArticle.jhtml?articleID=206904763 > > Does this come as news to any reader of this

Re: selling the MITM

2009-01-10 Thread Nelson B Bolyard
Ian G wrote, On 2009-01-10 08:57: > On 10/1/09 00:48, someone wrote: >> But, have you seen this article: >> http://www.informationweek.com/news/hardware/reviews/showArticle.jhtml?articleID=206904763 Does this come as news to any reader of this list? Such appliances have been around for years. Her