firefox and bad ssl certificates

[Mackenzie Morgan]

On Tue, 2008-05-13 at 16:24 -0400, Phillip Susi wrote:
> No, they won't, and shouldn't.  Why pay some idiot corporation an 
> extortion fee just because they bribed the browser manufacturers to 
> include their certs by default?  There is NO added security to having a 
> paid for cert.  See the several incidents where bank web sites have been 
> spoofed on a slightly misspelled version of the domain name and issued a 
> "valid" cert from a CA "proving" they are the bank you thought you were 
> visiting.

http://cacert.org, which has its certs included in Ubuntu by default, is
free.

-- 
Mackenzie Morgan
http://ubuntulinuxtipstricks.blogspot.com
apt-get moo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20080513/60c82347/attachment.sig>