A cool demo of how to spoof sites (also shows how TrustBar preventsthis...)

Ben Laurie ben at algroup.co.uk
Thu Feb 17 12:24:01 EST 2005


Taral wrote:
> On Wed, Feb 09, 2005 at 07:41:36PM +0200, Amir Herzberg wrote:
> 
>>Want to protect your Mozilla/FireFox from such attacks? Install our 
>>TrustBar: http://TrustBar.Mozdev.org
>>(this was the first time that I had a real reason to click the `I don't 
>>trust this authority` button...)
>>
>>Opinions?
> 
> 
> Why should I trust you? Filtering xn--* domains works for me, and
> doesn't require that I turn my browser over to unreviewed, possibly
> buggy code.

Errr ... your browser _is_ unreviewed, possibly buggy code.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com



More information about the cryptography mailing list