full-disclosure-uk January 2009 archive
Main Archive Page > Month Archives  > full-disclosure-uk archives
full-disclosure-uk: Re: [Full-disclosure] FD / lists.grok.org -

Re: [Full-disclosure] FD / lists.grok.org - bad SSL cert

From: Avraham Schneider <avri.schneider_at_nospam>
Date: Tue Jan 06 2009 - 14:36:09 GMT
To: "Gary Wilson" <dragon@dragons.org.uk>


On Tue, Jan 6, 2009 at 12:04 PM, Gary Wilson <dragon@dragons.org.uk> wrote:
>
> On Mon, January 5, 2009 19:01, James Matthews wrote:
>> SSL certs cost money. This one works the same. etc..
>>
>
> Well whilst I agree the self generated ones or whatever work well, I find
> it amusing that a _security_ based list is using one, and then expects
> people in the security industry to blindly accept or add exceptions for it
> - my irony alarm is going overtime at that one. I certainly wouldn't add
> an exception, as it's not a trusted website to me. I'm sure others would
> see it the same.

What's the worst case? Someone sniffing your unsub request? It's not like an e-commerce website. I don't see why FD should even have SSL in the first place.

I would guess the webmaster simply added SSL to allow those who have port 80 to full-disclosure (containing malicious code) filtered...

I think you are over-dramatizing 'the irony'.

>
> Doesn't matter now, as I'm unsubbed via the mail method, because FD just
> has too much noise-signal these days.
>
>
>
> --
> / Gary Wilson, aka dragon/dragonlord/dragonv480 \
> .'(_.------. e: dragon@northernscum.org.uk MSN: dragonv480 .------._)`.
> < _ | FB: http://profile.to/gary_wilson_horse_dentist/ | _ >
> `.( `------' w: http://volvo480.northernscum.org.uk `------' ).'
> \ w: http://www.northernscum.org.uk /
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/