The Way Out
join:2003-01-20 | reply to justin
Re: Don't trust the Lock icon either!
Yes, I set it up. As long as the "real" webhost has a valid SSL certificate (and is issued by a root that is trusted by the browser), no warning is popped up at all. Scary, huh. |
|
justin
Australian
join:1999-05-28
Brooklyn, NY | I figured it would work, as its just a display bug, really. Damn. I updated the news bit to link to your post demonstrating the fake encrypted site that gives no alerts about the certificate not matching what is displayed in the address bar. |
|
