Re: [Pan-users] gnutls error: hostname does not match server name

2012-05-03 Thread Heinrich Müller
Am 03.05.2012 15:32, schrieb walt: On 05/02/2012 06:04 PM, Duncan wrote: if the site uses self-signed certs and you accept the valid one, if it changes, at least to another self-signed, you'll normally get the usual warnings all over again, and can act accordingly. Very good point. So pan i

Re: [Pan-users] gnutls error: hostname does not match server name

2012-05-03 Thread Duncan
walt posted on Thu, 03 May 2012 06:32:09 -0700 as excerpted: > On 05/02/2012 06:04 PM, Duncan wrote: > > > >> if the site uses self-signed certs and you accept the valid one, if it >> changes, at least to another self-signed, you'll normally get the usual >> warnings all over again, and can act

Re: [Pan-users] gnutls error: hostname does not match server name

2012-05-03 Thread walt
On 05/02/2012 06:04 PM, Duncan wrote: > if the site uses self-signed certs and you accept the valid > one, if it changes, at least to another self-signed, you'll normally get > the usual warnings all over again, and can act accordingly. Very good point. So pan ideally should check for consis

Re: [Pan-users] gnutls error: hostname does not match server name

2012-05-02 Thread Duncan
walt posted on Wed, 02 May 2012 11:44:08 -0700 as excerpted: > I see that both of my (very low-budget) news providers use self-signed > certs anyway, so there is no protection from MITM possible in any case. > (Cheap is cheap ;) That's not exactly true. As long as you either get the correct cert

Re: [Pan-users] gnutls error: hostname does not match server name

2012-05-02 Thread walt
On 05/02/2012 09:11 AM, Duncan wrote: > walt posted on Tue, 01 May 2012 13:18:47 -0700 as excerpted: > >> Hi Heinrich, >> >> I finally figured out why pan is rejecting the cert from my news servers >> even though I click on "always trust cert" an infinite number of times. >> >> At least I think I

Re: [Pan-users] gnutls error: hostname does not match server name

2012-05-02 Thread Heinrich Müller
Am Tue, 01 May 2012 13:18:47 -0700 schrieb walt: > Hi Heinrich, > > I finally figured out why pan is rejecting the cert from my news servers > even though I click on "always trust cert" an infinite number of times. > > At least I think I know :) > > Both of my for-pay servers are smaller resell

Re: [Pan-users] gnutls error: hostname does not match server name

2012-05-02 Thread Duncan
walt posted on Tue, 01 May 2012 13:18:47 -0700 as excerpted: > Hi Heinrich, > > I finally figured out why pan is rejecting the cert from my news servers > even though I click on "always trust cert" an infinite number of times. > > At least I think I know :) > > Both of my for-pay servers are sm

[Pan-users] gnutls error: hostname does not match server name

2012-05-01 Thread walt
Hi Heinrich, I finally figured out why pan is rejecting the cert from my news servers even though I click on "always trust cert" an infinite number of times. At least I think I know :) Both of my for-pay servers are smaller resellers who use certs with names that don't match the URL of the serve