On 23 November 2015 at 22:36, Ted Roche <[email protected]> wrote:
> If I understand correctly, Dell shipped an identical self-signed root
> certificate called 'eDellRoot' signed with the clever password 'dell'
> that could be used by anyone in possession of the cert with any
> certificate they would like, effectively making https on Dell machines
> pointless.

And signed executables!

Only Chrome and Explorer use the Windows certs.  Firefox has its own BTW.

-- 
Paul

_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: http://leafe.com/archives/search/profox
This message: 
http://leafe.com/archives/byMID/profox/cadwx0+kyv0jfs_guph3yyv0yj-tobk0uqlyjp2mb4enp1e-...@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to