Re: [OT] Trojan/[spy/ad]ware and thawte.com

2004-06-01 Thread Florian Weimer
* Vincent Deffontaines: > 1) What are those .crl files used for? These are Certificate Revocation Lists. They are essential for the operation of a PKI, especially a global one with lose registration checks. > Maybe they could be used to "corrupt" actual browser's certs? There whole purpose is

Re: [OT] Trojan/[spy/ad]ware and thawte.com

2004-06-01 Thread Florian Weimer
* Vincent Deffontaines: > 1) What are those .crl files used for? These are Certificate Revocation Lists. They are essential for the operation of a PKI, especially a global one with lose registration checks. > Maybe they could be used to "corrupt" actual browser's certs? There whole purpose is

[OT] Trojan/[spy/ad]ware and thawte.com

2004-06-01 Thread Vincent Deffontaines
This is the 2nd occurence of strange entries on my proxy logs, within a few days (comments below): *** 10* - - [28/May/2004:14:09:17 +0200] "GET http://delivery.inet-traffic.com/inetdl.exe HTTP/1.0" 200 247544 TCP_REFRESH_HIT:DIRECT 10* - - [28/May/2004

[OT] Trojan/[spy/ad]ware and thawte.com

2004-06-01 Thread Vincent Deffontaines
This is the 2nd occurence of strange entries on my proxy logs, within a few days (comments below): *** 10* - - [28/May/2004:14:09:17 +0200] "GET http://delivery.inet-traffic.com/inetdl.exe HTTP/1.0" 200 247544 TCP_REFRESH_HIT:DIRECT 10* - - [28/May/2004