On Fri, Sep 13, 2013 at 10:51 PM, Kurt Roeckx wrote: > A self-signed cert's signature algorithm really isn't that > important. You either trust that cert or you don't.
Surely this work would apply to self-signed certs too? http://www.win.tue.nl/hashclash/rogue-ca/ -- bye, pabs http://wiki.debian.org/PaulWise -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/CAKTje6EP4qHAYqwBKeg-wQ9WYSdsaN85Avx3eEqHwSXt=or...@mail.gmail.com