« previous next »
Pages: 1 [2] 3 4 ... 12   Go Down

Author Topic: Comodo - SSL issues  (Read 83494 times)

0 Members and 1 Guest are viewing this topic.

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #15 on: March 24, 2011, 12:58:13 AM »
lol on a side note, I don't think anything worse could happen to Comodo. Officially they got screwed themselves (stolen credentials of an Comodo ssl cert provider)... now we don't know and we might never know how it happened...
Logged

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Comodo - SSL issues
« Reply #16 on: March 24, 2011, 12:59:48 AM »
For the ones who do not know what could happen:
Quote
These certificates may be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks against all Web browser users including users of Internet Explorer.
Logged
The best things in life are free.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Comodo - SSL issues
« Reply #17 on: March 24, 2011, 01:02:42 AM »
Logged
The best things in life are free.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Comodo - SSL issues
« Reply #18 on: March 24, 2011, 01:14:10 AM »
Thanks, Tech.
Everyone, who answered here is aware of the risks. ;)
Still, if other users should follow this thread, it won't hurt to offer some basic feedback.
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48550
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Comodo - SSL issues
« Reply #19 on: March 24, 2011, 01:17:32 AM »
Quote from: Asyn on March 23, 2011, 10:36:25 PM
Hi guys, as I don't want this thread to become a discussion thread. ;)
Please post further replies to the Comodo issue here: http://forum.avast.com/index.php?topic=74516.0
Thanks,
asyn

Edit: Or follow Tech's link to WSF... (Thanks Tech..!!)


It would be a lot nicer to do it directly on the Comodo forum. :0
Logged
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXde -  Repair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #20 on: March 24, 2011, 01:19:03 AM »
apparently Google reacted already a week ago ??? (meaning they can act without waiting for a Win Update)... and the issue was already known.
Quote
The Chrome Stable and Beta channels have been updated to 10.0.648.151 for Windows, Mac, Linux and Chrome Frame.  This release blacklists a small number of HTTPS certificates.  If you find new issues, please let us know by filing a bug. Want to change to another Chrome release channel?

not sure if that's related to what's being discussed here but according to an article I just read (Heise I think...) that is related.

http://www.h-online.com/security/news/item/SSL-meltdown-forces-browser-developers-to-update-1213358.html

http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_17.html

... also just what I was thinking a few minutes ago (about Apple)
Quote
The update policies of Opera and Apple currently remain unknown
« Last Edit: March 24, 2011, 01:21:09 AM by Logos »
Logged

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Comodo - SSL issues
« Reply #21 on: March 24, 2011, 01:24:23 AM »
As SSL Certification is the core of Comodo security... This is a knock out, isn't it?

Edited: Bad English  :P
« Last Edit: March 24, 2011, 01:29:53 AM by Tech »
Logged
The best things in life are free.

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #22 on: March 24, 2011, 01:24:54 AM »
Quote from: Logos on March 24, 2011, 01:19:03 AM
... also just what I was thinking a few minutes ago (about Apple)
Quote
The update policies of Opera and Apple currently remain unknown

Opera has had OSCP enabled for quite a while. As for Safari - who cares (TM)  :P
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Comodo - SSL issues
« Reply #23 on: March 24, 2011, 01:28:54 AM »
Quote from: Tech on March 24, 2011, 01:24:23 AM
This is a knock down, isn't it?

It sure is. ;D
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #24 on: March 24, 2011, 01:33:51 AM »
Quote from: doktornotor on March 24, 2011, 01:24:54 AM
Quote from: Logos on March 24, 2011, 01:19:03 AM
... also just what I was thinking a few minutes ago (about Apple)
Quote
The update policies of Opera and Apple currently remain unknown

Opera has had OSCP enabled for quite a while. As for Safari - who cares (TM)  :P

well excuse me but I do care, check my sig ::)

ps: I hate Safari, but there's no serious alternative on iDevices.
Logged

doktornotor

  • Guest
Re: Comodo - SSL issues
« Reply #25 on: March 24, 2011, 01:36:20 AM »
Quote from: Logos on March 24, 2011, 01:33:51 AM
well excuse me but I do care, check my sig ::)

You mean the "Alliance for the Promotion of Avast Native Orange Skin"?  :D ;D
Logged

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #26 on: March 24, 2011, 01:39:17 AM »
Quote from: doktornotor on March 24, 2011, 01:36:20 AM
Quote from: Logos on March 24, 2011, 01:33:51 AM
well excuse me but I do care, check my sig ::)

You mean the "Alliance for the Promotion of Avast Native Orange Skin"?  :D ;D

yes ;D
Logged

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #27 on: March 24, 2011, 02:14:57 AM »
I see Safari desktop has OCSP checking available - must be manually activated - but I have no idea if Safari iOs does... the settings interface for Safari is so poor on iOS that it's impossible to find out. I guess some jailbreaking geeks should know that ;D
Logged

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>> Avast Forum - Deutschsprachiger Bereich <<<
Re: Comodo - SSL issues
« Reply #28 on: March 24, 2011, 02:22:53 AM »
Logged
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Hermite15

  • Guest
Re: Comodo - SSL issues
« Reply #29 on: March 24, 2011, 11:41:32 AM »
'Iranian' attackers forge Google's Gmail credentials'
http://www.theregister.co.uk/2011/03/23/gmail_microsoft_web_credential_forgeries/

so this actually started on March 15, meaning that Google was the first and only one to react at the time.
« Last Edit: March 24, 2011, 11:43:27 AM by Logos »
Logged
Pages: 1 [2] 3 4 ... 12   Go Up
« previous next »