Re: [TLS] TLS, PKI, and web security. Was: Eleven out of every ten SSL certs aren't valid

"Jeffrey A. Williams" <jwkckid1@ix.netcom.com> Tue, 13 July 2010 21:21 UTC

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=dk20050327; d=ix.netcom.com; b=f21USCJvmHijpmBM7RK5VSkFVvFKomUsq0i0klmxH4vToOzO9JTJqj1hk8s0KCtk; h=Message-ID:Date:From:Reply-To:To:Subject:Cc:Mime-Version:Content-Type:Content-Transfer-Encoding:X-Mailer:X-ELNK-Trace:X-Originating-IP;
Message-ID: <27016105.1279056119291.JavaMail.root@elwamui-royal.atl.sa.earthlink.net>
Date: Tue, 13 Jul 2010 16:21:58 -0500
From: "Jeffrey A. Williams" <jwkckid1@ix.netcom.com>
To: Bruno Harbulot <Bruno.Harbulot@manchester.ac.uk>, tls@ietf.org
Mime-Version: 1.0
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
Cc: graves.spindler@dhs.gov
Subject: Re: [TLS] TLS, PKI, and web security. Was: Eleven out of every ten SSL certs aren't valid
Precedence: list
Reply-To: "Jeffrey A. Williams" <jwkckid1@ix.netcom.com>

Bruno and all,

  Good point Bruno.  Still though Roberts right here.  
Additionally there are also service providers of various
types that are their own CA as well that may or may not
be a contributer to issuing invalid certs.    

-----Original Message-----
>From: Bruno Harbulot <Bruno.Harbulot@manchester.ac.uk>
>Sent: Jul 13, 2010 12:51 PM
>To: tls@ietf.org
>Subject: Re: [TLS] TLS, PKI, and web security. Was: Eleven out of every ten SSL certs aren't valid
>
>
>
>On 13/07/10 17:40, Robert Relyea wrote:
>> The real problem, of course, is those sites that don't have valid certs.
>> Continuing to ratched down the ability to get to those sites is good for
>> the internet as a whole. Sites with invalid certs are just as dangerous
>> for the internet as MITM sites.
>
>Then we're back on the possible subjective manner by which CA 
>certificates get into browsers by default. There are consequences in 
>terms of oligopoly, which might not be so good for the internet as a whole.
>
>
>Best wishes,
>
>Bruno.
>
>_______________________________________________
>TLS mailing list
>TLS@ietf.org
>https://www.ietf.org/mailman/listinfo/tls

Regards,

Jeffrey A. Williams
Spokesman for INEGroup LLA. - (Over 300+k members/stakeholders and growing, strong!)
"Obedience of the law is the greatest freedom" -
   Abraham Lincoln

"Credit should go with the performance of duty and not with what is very
often the accident of glory" - Theodore Roosevelt

"If the probability be called P; the injury, L; and the burden, B; liability
depends upon whether B is less than L multiplied by
P: i.e., whether B is less than PL."
United States v. Carroll Towing  (159 F.2d 169 [2d Cir. 1947]
===============================================================
Updated 1/26/04
CSO/DIR. Internet Network Eng. SR. Eng. Network data security IDNS. div. of
Information Network Eng.  INEG. INC.
ABA member in good standing member ID 01257402 E-Mail jwkckid1@ix.netcom.com
Phone: 214-244-4827

Re: [TLS] TLS, PKI, and web security. Was: Eleven… Blumenthal, Uri - 0668 - MITLL
Re: [TLS] TLS, PKI, and web security. Was: Eleven… Jeffrey A. Williams