Re: Kurt Seifred's article on securityportal

[Michael T. Babcock]

Ulf Moeller wrote:

> On Wed, Dec 20, 2000, Gary Feldman wrote:
>
> > Let's be fair.  As your example really points out, the problem in this
> > specific case (your example, not necessarily the "Accept this invalid
> > certificate case") is with the developers, not the users.
>
> Which browser would that be? Netscape has no default, and with IE the
> default is "no".

Check IE 5.5's advanced options.

Several security related defaults are shut off -- like checking the expiry
on a cert and/or checking if a cert is revoked.

--
Michael T. Babcock (PGP: 0xBE6C1895)
http://www.fibrespeed.net/~mbabcock/



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]