Re: Wachovia's web page security

>> Whether or not you have a SSL certificate, if you do the crime, expect
>> litigation. And I don't see why you'd have MORE litigation because
>> of the cert if you didn't try to impersonate someone else with it.
>> Incidentally, I can easily generate my own SSL certificates.
>> It won't be signed by any known certificate issuer, and it will pop up
>> warnings in a browser, but it does work. Somewhere I've got one
>> I generated for "Satan, Prince of Darkness". Would you feel safer
>> because of the cert at that site?
>>
>>
> Gordon L. Burditt
>
>Yep, you are right. SSL certificates are just a waste of time. What
>was I thinking?

They are (from the point of view of the buyer) if you don't pay
attention. The SSL cert is supposed to give some assurance that
you're connected to the web site you think you are. If you don't
even look at what web site it says you are connected to, what good
is it? Otherwise it just ensures that you safely deliver your credit
card number to one thief before the other thieves get a crack at it.

Gordon L. Burditt
.

Relevant Pages

  • Re: Exchange 2007 and Outlook Anywhere
    ... Exchange 2007 and SSL Certificates ... single domain SSL cert work for Outlook anywhere or do I have to have a SAN ... HTTPS to HTTP ...
    (microsoft.public.exchange.admin)
  • RE: [Full-Disclosure] VerySign Class 1 Authority - bogus SSL certificate?
    ... > I've been getting SSL certificates from various websites recently that are ... no big deal in this type of cert these certs can be created by anyone, except that verisign cert would not have been accepted by the browser, that is why we have trusted Certifacate authorities which do the validation of the certs. ... please revoke the cert and make a new one or if u know the site owner please alert the site owner as well as versisign ...
    (Full-Disclosure)
  • ISA 2006 single NIC with two SSL certs
    ... I have ISA 2006 in the DMZ with a single NIC. ... it possible to bind two SSL certificates to this machine. ... internal(CA cert) cert talking to exchange named? ...
    (microsoft.public.isa)
  • Re: Wachovias web page security
    ... > Whether or not you have a SSL certificate, if you do the crime, expect ... And I don't see why you'd have MORE litigation because ... > of the cert if you didn't try to impersonate someone else with it. ... SSL certificates are just a waste of time. ...
    (misc.consumers)
  • Re: ssl question
    ... you have some problem with the cert itself. ... The Web site might be experiencing technical> difficulties, or you may need to adjust your browser settings....Cannot> find server or DNS error" ... Determine If SSL Connectivity Is Not Working on ... It says to> attach assign the certificate to the default web site, ...
    (microsoft.public.inetserver.iis.security)