Author Topic: Comodo - SSL issues  (Read 72971 times)

0 Members and 1 Guest are viewing this topic.

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #15 on: March 24, 2011, 12:58:13 AM »
lol on a side note, I don't think anything worse could happen to Comodo. Officially they got screwed themselves (stolen credentials of an Comodo ssl cert provider)... now we don't know and we might never know how it happened...

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re: Comodo - SSL issues
« Reply #16 on: March 24, 2011, 12:59:48 AM »
For the ones who do not know what could happen:
Quote
These certificates may be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against all Web browser users including users of Internet Explorer.
The best things in life are free.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re: Comodo - SSL issues
« Reply #17 on: March 24, 2011, 01:02:42 AM »
The best things in life are free.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75505
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #18 on: March 24, 2011, 01:14:10 AM »
Thanks, Tech.
Everyone, who answered here is aware of the risks. ;)
Still, if other users should follow this thread, it won't hurt to offer some basic feedback.
W8.1 [x64] - Avast PremSec 22.5.7253.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 47044
  • 62 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Comodo - SSL issues
« Reply #19 on: March 24, 2011, 01:17:32 AM »
Hi guys, as I don't want this thread to become a discussion thread. ;)
Please post further replies to the Comodo issue here: http://forum.avast.com/index.php?topic=74516.0
Thanks,
asyn

Edit: Or follow Tech's link to WSF... (Thanks Tech..!!)


It would be a lot nicer to do it directly on the Comodo forum. :0
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, Avast One 21.11, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bi

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #20 on: March 24, 2011, 01:19:03 AM »
apparently Google reacted already a week ago ??? (meaning they can act without waiting for a Win Update)... and the issue was already known.
Quote
The Chrome Stable and Beta channels have been updated to 10.0.648.151 for Windows, Mac, Linux and Chrome Frame.  This release blacklists a small number of HTTPS certificates.  If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel?

not sure if that's related to what's being discussed here but according to an article I just read (Heise I think...) that is related.

http://www.h-online.com/security/news/item/SSL-meltdown-forces-browser-developers-to-update-1213358.html

http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_17.html

... also just what I was thinking a few minutes ago (about Apple)
Quote
The update policies of Opera and Apple currently remain unknown
« Last Edit: March 24, 2011, 01:21:09 AM by Logos »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re: Comodo - SSL issues
« Reply #21 on: March 24, 2011, 01:24:23 AM »
As SSL Certification is the core of Comodo security... This is a knock out, isn't it?

Edited: Bad English  :P
« Last Edit: March 24, 2011, 01:29:53 AM by Tech »
The best things in life are free.

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #22 on: March 24, 2011, 01:24:54 AM »
... also just what I was thinking a few minutes ago (about Apple)
Quote
The update policies of Opera and Apple currently remain unknown

Opera has had OSCP enabled for quite a while. As for Safari - who cares (TM)  :P

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75505
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #23 on: March 24, 2011, 01:28:54 AM »
This is a knock down, isn't it?

It sure is. ;D
W8.1 [x64] - Avast PremSec 22.5.7253.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #24 on: March 24, 2011, 01:33:51 AM »
... also just what I was thinking a few minutes ago (about Apple)
Quote
The update policies of Opera and Apple currently remain unknown

Opera has had OSCP enabled for quite a while. As for Safari - who cares (TM)  :P

well excuse me but I do care, check my sig ::)

ps: I hate Safari, but there's no serious alternative on iDevices.

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #25 on: March 24, 2011, 01:36:20 AM »
well excuse me but I do care, check my sig ::)

You mean the "Alliance for the Promotion of Avast Native Orange Skin"?  :D ;D

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #26 on: March 24, 2011, 01:39:17 AM »
well excuse me but I do care, check my sig ::)

You mean the "Alliance for the Promotion of Avast Native Orange Skin"?  :D ;D

yes ;D

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #27 on: March 24, 2011, 02:14:57 AM »
I see Safari desktop has OCSP checking available - must be manually activated - but I have no idea if Safari iOs does... the settings interface for Safari is so poor on iOS that it's impossible to find out. I guess some jailbreaking geeks should know that ;D

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 75505
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast PremSec 22.5.7253.B [UI.706] - Firefox ESR 91.9.1 [NS/uBO/PB] - Thunderbird 91.9.1
Avast-Tools: Secure Browser 101.0 - Cleanup 22.2 - SecureLine 5.18 - Driver Updater 22.2 - CCleaner 6.0
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #29 on: March 24, 2011, 11:41:32 AM »
'Iranian' attackers forge Google's Gmail credentials'
http://www.theregister.co.uk/2011/03/23/gmail_microsoft_web_credential_forgeries/

so this actually started on March 15, meaning that Google was the first and only one to react at the time.
« Last Edit: March 24, 2011, 11:43:27 AM by Logos »