Author Topic: Comodo - SSL issues  (Read 72970 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75505
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Comodo - SSL issues
« on: March 23, 2011, 10:35:02 PM »
« Last Edit: March 23, 2011, 11:10:35 PM by Asyn »
W8.1 [x64] - Avast PremSec 22.5.7253.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re: Comodo - SSL issues
« Reply #1 on: March 23, 2011, 10:37:40 PM »
The best things in life are free.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75505
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #2 on: March 23, 2011, 11:05:09 PM »
@doc: You thread @comodo has been restored. ;) (Thanks Bob..!!!)
https://forums.comodo.com/ssl-certificate/comodo-issues-fraudulent-google-microsoft-mozilla-skype-yahoo-certificates-t70990.0.html;msg504253#msg504253

Quote
All

My mistake, I'd forgotten that the Forum Policy Violation Board is no longer visible and what I had done was not transparent.

The original topic has been restored, less the offending posts.

   Comodo issues fraudulent Google, Microsoft, Mozilla, Skype, Yahoo certificates

Sal: Thanks, I should had thought of that sooner. Smiley
« Last Edit: March 23, 2011, 11:08:15 PM by Asyn »
W8.1 [x64] - Avast PremSec 22.5.7253.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #3 on: March 23, 2011, 11:56:04 PM »
this is all new to me, thanks guys ;D

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #4 on: March 23, 2011, 11:58:16 PM »
@doc: You thread @comodo has been restored. ;) (Thanks Bob..!!!)

Haha... not my account though.

@mods: Would be nice to split the stuff from the original thread and move it here.

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #5 on: March 24, 2011, 12:03:39 AM »
this added to the (unrelated) RSA affair... wonderful times :D
http://www.scmagazineuk.com/the-impact-of-the-rsa-token-data-breach-is-still-undetermined/article/198935/

edit: I started a thread about it a few days ago, thanks for the feedback there btw guys ::)
http://forum.avast.com/index.php?topic=74077.msg614434#msg614434
« Last Edit: March 24, 2011, 12:06:05 AM by Logos »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75505
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #6 on: March 24, 2011, 12:09:43 AM »
W8.1 [x64] - Avast PremSec 22.5.7253.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #7 on: March 24, 2011, 12:12:06 AM »
No..?? Did they ban you and leave your account running, or what..??

See below. (No, I don't need the account back, haven't been there for like 2 years).

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75505
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #8 on: March 24, 2011, 12:12:59 AM »
edit: I started a thread about it a few days ago, thanks for the feedback there btw guys ::)
http://forum.avast.com/index.php?topic=74077.msg614434#msg614434

Well, I linked to your thread, but you didn't even notice. ;)
http://forum.avast.com/index.php?topic=52252.msg614616#msg614616
W8.1 [x64] - Avast PremSec 22.5.7253.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #9 on: March 24, 2011, 12:17:00 AM »
@Asyn okay ;)

Hmm guys... I see a major problem here, the "other" doctornotor is saying that FF4 RC2 was justified to block fraulent certificates. Fair enough... but FF has its own certificate store while Chrome is using Windows/IE store... and as far as I'm concerned unless MS sends an update through Windows Update IE8/9 and Chrome are vulnerable. Got to say that the ZDnet article is ...hmm... worrying
http://www.zdnet.com/blog/security/microsoft-warns-fraudulent-digital-certificates-issued-for-high-value-websites/8488?tag=nl.e589

ps: lol, funny I updated to RC2 a few days ago and the only thing I found was that Mozilla corrected a last minute bug... but the article didn't say what... I didn't really care and should have searched other places...
« Last Edit: March 24, 2011, 12:20:03 AM by Logos »

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #10 on: March 24, 2011, 12:22:48 AM »
Hmm guys... I see a major problem here, the "other" doctornotor is saying that FF4 RC2 was justified to block fraulent certificates. Fair enough... but FF has its own certificate store while Chrome is using Windows/IE store... and as far as I'm concerned unless MS sends an update through Windows Update IE8/9 and Chrome are vulnerable. Got to say that the ZDnet article is ...hmm... worrying

Already out as critical update on WU and WSUS. Also manual d/l via http://support.microsoft.com/kb/2524375 (from XP up to Server 2008 R2)

P.S. IE and Chrome is doing it the right way (TM) - bundling its own certificates crap is plain wrong, and nightmare to manage in business environment.
« Last Edit: March 24, 2011, 12:30:30 AM by doktornotor »

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #11 on: March 24, 2011, 12:25:36 AM »
yeah I just saw that in the article:
Quote
Microsoft has pushed out an update for all supported versions of Windows to help address this issue and notes that no action is required from Windows users with automatic update enabled.  The company’s advisory contains instructions on manually applying the update.

edit: KB2524375 (W7/64) already available directly from Windows update.
« Last Edit: March 24, 2011, 12:34:16 AM by Logos »

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #12 on: March 24, 2011, 12:41:24 AM »
Apparently the morons @ Comodo have not heard about DNSSEC yet either; ugh.  ::)

Quote from: Melih the victim of Iranian govt.
If there was a secure and trusted DNS this issue would be a moot point! We need a Secure and Trusted DNS!

Now we are living in a new era where people who provide Authentication to end users are target for State-funded entities! Its a new era indeed.....brace yourselves....

Melih

 :-X ::)

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #13 on: March 24, 2011, 12:54:40 AM »
lol... the guy feels guilty ;D now he's trying to put the weight on DNS servers shoulders ::) same old Melih...

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75505
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #14 on: March 24, 2011, 12:54:52 AM »
Seems, they're searchin for flimsy excuses. ;)
W8.1 [x64] - Avast PremSec 22.5.7253.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0