IETF Logo Mail Archive

Re: [TLS] Eleven out of every ten SSL certs aren't valid

"Jeffrey A. Williams" <jwkckid1@ix.netcom.com> Tue, 29 June 2010 22:30 UTC

Return-Path: <jwkckid1@ix.netcom.com>
X-Original-To: tls@core3.amsl.com
Delivered-To: tls@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 909D33A6407 for <tls@core3.amsl.com>; Tue, 29 Jun 2010 15:30:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 2.153
X-Spam-Level: **
X-Spam-Status: No, score=2.153 tagged_above=-999 required=5 tests=[AWL=-0.155, BAYES_50=0.001, HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.097, HTML_NONELEMENT_30_40=0.001, MIME_HTML_ONLY=1.457, SARE_OBFU_ALL=0.751]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JLepQQxPvr7Y for <tls@core3.amsl.com>; Tue, 29 Jun 2010 15:30:31 -0700 (PDT)
Received: from elasmtp-kukur.atl.sa.earthlink.net (elasmtp-kukur.atl.sa.earthlink.net [209.86.89.65]) by core3.amsl.com (Postfix) with ESMTP id 36FD83A680D for <tls@ietf.org>; Tue, 29 Jun 2010 15:30:31 -0700 (PDT)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk20050327; d=ix.netcom.com; b=GqC8WWDKvvFkTzLaT/FL/hi1qLUWcQqoIu5Yc49isfniYtCry/ezoMDuh36p1yC2; h=Message-ID:Date:From:Reply-To:To:Subject:Cc:Mime-Version:Content-Transfer-Encoding:X-Mailer:Content-Type:X-ELNK-Trace:X-Originating-IP;
Received: from [209.86.224.38] (helo=elwamui-lapwing.atl.sa.earthlink.net) by elasmtp-kukur.atl.sa.earthlink.net with esmtpa (Exim 4.67) (envelope-from <jwkckid1@ix.netcom.com>) id 1OTjKB-0003P0-By; Tue, 29 Jun 2010 18:30:39 -0400
Received: from 99.93.224.206 by webmail.earthlink.net with HTTP; Tue, 29 Jun 2010 18:30:38 -0400
Message-ID: <26576468.1277850639117.JavaMail.root@elwamui-lapwing.atl.sa.earthlink.net>
Date: Tue, 29 Jun 2010 17:30:38 -0500
From: "Jeffrey A. Williams" <jwkckid1@ix.netcom.com>
To: "Blumenthal, Uri - 0668 - MITLL" <uri@ll.mit.edu>, Tim Dierks <tim@dierks.org>, Ivan Ristic <ivan.ristic@gmail.com>
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
X-Mailer: EarthLink Zoo Mail 1.0
Content-Type: text/html; charset="UTF-8"
X-ELNK-Trace: c8e3929e1e9c87a874cfc7ce3b1ad11381c87f5e51960688c81c6f3c5f3a809a83564c615e801515350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 209.86.224.38
Cc: "tls@ietf.org" <tls@ietf.org>
Subject: Re: [TLS] Eleven out of every ten SSL certs aren't valid
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: "Jeffrey A. Williams" <jwkckid1@ix.netcom.com>
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 29 Jun 2010 22:30:32 -0000

Re: [TLS] Eleven out of every ten SSL certs aren't valid

Uri and all,

 

  I also concur.  There are simply too many questionable certification authorities issuing

false or usless Certs and have been for some years now.


-----Original Message-----
From: "Blumenthal, Uri - 0668 - MITLL"
Sent: Jun 29, 2010 9:48 AM
To: Tim Dierks , Ivan Ristic
Cc: "tls@ietf.org"
Subject: Re: [TLS] Eleven out of every ten SSL certs aren't valid

On 6/29/10 10:36 , "Tim Dierks" <tim@dierks.org" target="_blank" rel="nofollow">tim@dierks.org> wrote:
>  On Tue, Jun 29, 2010 at 10:15 AM, Ivan Ristic <ivan.ristic@gmail.com" target="_blank" rel="nofollow">ivan.ristic@gmail.com> wrote:
>> If you're referring to my work, I didn't make any assumptions.
>> I merely reported the findings, which are that  about 3.17% of domain
>> names that respond with SSL on port 443 have a potentially valid
>> certificate.
>
> In my opinion, this is a pretty meaningless statistic.

I concur.
--
Regards,
Uri         uri@ll.mit.edu" target="_blank" rel="nofollow">uri@ll.mit.edu
<Disclaimer>

Regards,

Jeffrey A. Williams
Spokesman for INEGroup LLA. - (Over 300+k members/stakeholders and growing, strong!)
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln

"Credit should go with the performance of duty and not with what is very
often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B; liability
depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of
Information Network Eng.  INEG. INC.
ABA member in good standing member ID 01257402 E-Mail jwkckid1@ix.netcom.com
Phone: 214-244-4827

v2.23.0 | Report a Bug | By Email