Author Topic: Comodo - SSL issues  (Read 83550 times)

0 Members and 1 Guest are viewing this topic.

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #60 on: March 25, 2011, 05:23:22 PM »
lol yeah I know, but I don't use Safari desktop at all, I just use the mobile version where there's no options at all :D see screen shot, add to that private data clearing, web site storage, and you've seen all safari settings on iPhone/iPod

edit: and no there is no security settings section in iOS

That is a grand fail.  :( There's really no other browser for this thing?

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #61 on: March 25, 2011, 05:31:57 PM »
lol yeah I know, but I don't use Safari desktop at all, I just use the mobile version where there's no options at all :D see screen shot, add to that private data clearing, web site storage, and you've seen all safari settings on iPhone/iPod

edit: and no there is no security settings section in iOS

That is a grand fail.  :( There's really no other browser for this thing?

there's Opera mini, and it's crap, a stripped down version of Opera Mobile, lagging like hell. All the coding work is done at server level. Otherwise there's "Firefox home", just a oneway synced interface with FF4.

 Okay basically Apple doesn't allow the installation of a full third party browser on iDevices. Meaning that due to Apple restrictions, full FF4 mobile for instance or Opera mobile will never be available on iPhone/iPod/iPad.

ps: and last but not least, when you install the stripped down versions I described, you get an alert from Apple warning you that you're installing software that may contain adult content ;D

sorry for the off topic guys ;)
« Last Edit: March 25, 2011, 05:36:26 PM by Logos »

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #62 on: March 25, 2011, 05:35:13 PM »
Okay basically Apple doesn't allow the installation of a full third party browser on iDevices.

Edit: ROTFLMAO @ XXX warning.  ;D
« Last Edit: March 25, 2011, 05:46:40 PM by doktornotor »

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #63 on: March 25, 2011, 05:38:15 PM »
@doktornotor read my ps in the last post ;D

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Comodo - SSL issues
« Reply #64 on: March 25, 2011, 10:38:09 PM »
SSL Guard (some comments are related to lack of browsing).
Not compatible with Firefox 4.

Certificate Patrol.
Hmmm... Not sure if it is really working.
The best things in life are free.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #65 on: March 25, 2011, 10:57:23 PM »
More related reading stuff...

Revocation doesn't work
http://www.imperialviolet.org/2011/03/18/revocation.html

Quote
You can configure Firefox to be strict about checking if you wish: security.OCSP.require in about:config

Fake SSL Certificate Incident Highlights Flaws in DNS: Comodo CEO
http://www.eweek.com/c/a/Security/Fake-SSL-Certificate-Incident-Highlights-Flaws-in-DNS-Comodo-CEO-440985/

Protect Safari from Fraudulent Digital Certificates
http://blog.intego.com/2011/03/24/protect-safari-from-fraudulent-digital-certificates/
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #66 on: March 25, 2011, 11:11:18 PM »
Revocation doesn't work
http://www.imperialviolet.org/2011/03/18/revocation.html

Hmmm, so...

Quote
A much better solution would be for certificates to only be valid for a few days and to forget about revocation altogether. This doesn't mean that the private key needs to change every few days, just the certificate.

I find this idea plain ridiculous. Not really keen on calling my bank every X days to verify the certificate fingerprint. Uh.  ::) ???

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #67 on: March 25, 2011, 11:22:09 PM »
Hmmm, so...

The quoted part might be interesting to some. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #68 on: March 26, 2011, 04:34:03 PM »
Comodo Certificate Issue – Follow Up
http://blog.mozilla.com/security/2011/03/25/comodo-certificate-issue-follow-up/

Quote
In hindsight, while it was made in good faith, this was the wrong decision. We should have informed web users more quickly about the threat and the potential mitigations as well as their side-effects.
« Last Edit: March 26, 2011, 04:37:10 PM by Asyn »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Comodo - SSL issues
« Reply #69 on: March 26, 2011, 04:43:20 PM »
Thanks Asyn, very good and serene reading.
The best things in life are free.

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #70 on: March 26, 2011, 05:19:02 PM »
yeah Asyn, that's interesting, proof that people, Mozilla here, won't take Comodo's explanations for granted and will keep investigating. I bet MS, Skype, Google and Yahoo are doing the same, the issue is too bad to be forgotten with a revocation list and a few patches, there's too much involved, global internet security and privacy are involved. Not even mentioning that on the legal side, there's probably an investigation going on at administration level in the US.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #71 on: March 26, 2011, 05:39:48 PM »
mozilla wiki - CA:Comodo Misissuance Response
https://wiki.mozilla.org/CA:Comodo_Misissuance_Response
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Comodo - SSL issues
« Reply #72 on: March 26, 2011, 07:10:19 PM »
Thanks Asyn, very good and serene reading.

NP, Tech. :)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Cast

  • Sr. Member
  • ****
  • Posts: 302
Re: Comodo - SSL issues
« Reply #73 on: March 28, 2011, 07:03:00 PM »
comomod pasted this on there facebook page
http://pastebin.com/74KXCaEZ
« Last Edit: March 28, 2011, 09:15:06 PM by Castayr »

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #74 on: March 28, 2011, 07:59:10 PM »