Full Disclosure mailing list archives
Re: A tool to identify the MD5 certs on FF
From: Aiko Barz <aiko () deepco de>
Date: Fri, 2 Jan 2009 20:30:31 +0100
On Thu, Jan 01, 2009 at 06:19:01PM -0500, Memisyazici, Aras wrote:
SSL Blacklist now detects and warns about certificate chains that use the MD5 algorithm for RSA signatures.
Does anybody know a plugin that keeps track of the used certificates and CAs? I tried "certificate patrol" [1]. But I wasn't too happy... I would like to get warnings, whenever a fingerprint changes. For example: INFO: The certificate fingerprint has changed. The new certificate is signed by the same CA. Details... WARNING: The certificate fingerprint has changed. The new certificate is signed by a different CA. A possible MITM attack has been detected. Details... So long, Aiko [1]: https://addons.mozilla.org/en-US/firefox/addon/6415 -- :wq ✉
Attachment:
signature.asc
Description: Digital signature
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- A tool to identify the MD5 certs on FF Memisyazici, Aras (Jan 01)
- Re: A tool to identify the MD5 certs on FF Aiko Barz (Jan 02)
- Re: A tool to identify the MD5 certs on FF Mark Sec (Jan 06)
- Re: A tool to identify the MD5 certs on FF James Matthews (Jan 06)
- Re: A tool to identify the MD5 certs on FF Mark Sec (Jan 06)
- Re: A tool to identify the MD5 certs on FF Aiko Barz (Jan 02)