IETF Logo Mail Archive

Re: [TLS] Eleven out of every ten SSL certs aren't valid

Joshua Davies <joshua.davies@travelocity.com> Tue, 29 June 2010 15:44 UTC

Return-Path: <Joshua.Davies@travelocity.com>
X-Original-To: tls@core3.amsl.com
Delivered-To: tls@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 79C103A6827 for <tls@core3.amsl.com>; Tue, 29 Jun 2010 08:44:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.598
X-Spam-Level:
X-Spam-Status: No, score=-106.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FJ9yuCdjMf5o for <tls@core3.amsl.com>; Tue, 29 Jun 2010 08:44:14 -0700 (PDT)
Received: from sgtulmg01-out.sabre.com (sgtulmg01-out.sabre.com [151.193.220.17]) by core3.amsl.com (Postfix) with ESMTP id 322E53A6781 for <tls@ietf.org>; Tue, 29 Jun 2010 08:44:14 -0700 (PDT)
X-ExtLoop1: From 10.12.64.16
X-IronPort-AV: E=Sophos; i="4.53,505,1272862800"; d="scan'208,217"; a="725881886"
Received: from unknown (HELO sghdqbh01.Global.ad.sabre.com) ([10.12.64.16]) by sgtulmg01-out.sabre.com with ESMTP; 29 Jun 2010 10:44:11 -0500
Received: from sgtulmsp06.Global.ad.sabre.com ([10.12.64.145]) by sghdqbh01.Global.ad.sabre.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 29 Jun 2010 10:44:11 -0500
Received: from localhost.localdomain ([10.16.53.44]) by sgtulmsp06.Global.ad.sabre.com with Microsoft SMTPSVC(6.0.3790.3959); Tue, 29 Jun 2010 10:44:08 -0500
Message-ID: <4C2A1496.3040805@travelocity.com>
Date: Tue, 29 Jun 2010 10:43:18 -0500
From: Joshua Davies <joshua.davies@travelocity.com>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.9) Gecko/20100317 Lightning/1.0b1 Thunderbird/3.0.4
MIME-Version: 1.0
To: tls@ietf.org
References: <E1OTVaY-0004g3-OW@wintermute02.cs.auckland.ac.nz> <201006291350.o5TDoMoO018788@fs4113.wdf.sap.corp> <AANLkTinWDU7RKXRU1drErtWZSdOyGwSymOBdwXSnYMEB@mail.gmail.com> <7C6BDB4BD9974646856544650C016B82139E7C@XCH117CNC.rim.net>
In-Reply-To: <7C6BDB4BD9974646856544650C016B82139E7C@XCH117CNC.rim.net>
Content-Type: multipart/alternative; boundary="------------040806000503090009090105"
X-OriginalArrivalTime: 29 Jun 2010 15:44:08.0460 (UTC) FILETIME=[E97C44C0:01CB17A1]
Subject: Re: [TLS] Eleven out of every ten SSL certs aren't valid
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Jun 2010 15:44:15 -0000

Well, ok, but... why listen on port 443 if you don't plan to support SSL 
in the first place?  I doubt that oracle.com is being run from a 
shared-hosting site.  Most likely it's Akamai that's doing something 
that doesn't mix well with TLS; Oracle may not care, but this, I would 
think, would be of some interest to the IETF TLS working group...

On 06/29/2010 10:03 AM, Rob P Williams wrote:
> The www.oracle.com example is perfect. Oracle doesn't have an SSL site so you get an Akamai certificate - and your browser says, "This is not trusted" - which is correct!
>
>    

	




<http://twiki.dev.sabre.com/twiki/bin/view/Travelocity/TVLYArchitecture>

v2.23.0 | Report a Bug | By Email