On Tue, Feb 28, 2012 at 10:11 PM, Nick Holland <n...@holland-consulting.net> wrote: > On 02/28/12 21:43, Nathan Stiles wrote: >> Hello, >> Also I've noticed that HTTPS isn't implemented on openbsd.org. > > buy a CD. > Really. > > The "chains of rust" you were putting your trust in has flaws.
I'm hoping Nathan saw that a bunch of root cert owners got 0wned and all their certs cannot be trusted any more, especially since those certs have been used in man-in-the-middle attacks. -- http://www.glumbert.com/media/shift http://www.youtube.com/watch?v=tGvHNNOLnCk "This officer's men seem to follow him merely out of idle curiosity." -- Sandhurst officer cadet evaluation. "Securing an environment of Windows platforms from abuse - external or internal - is akin to trying to install sprinklers in a fireworks factory where smoking on the job is permitted." -- Gene Spafford learn french: http://www.youtube.com/watch?v=30v_g83VHK4