Flutterby™! : HTTPS MitM attack against Gmail?

HTTPS MitM attack against Gmail?

2011-08-29 18:05:03.489368+00 by Dan Lyke 4 comments

Interesting to see how this shakes out: Iran may be launching a man-in-the-middle attack against Gmail SSH/HTTPS connection. Via @hkashfi tweet, via @mikkohypponen tweet

[ related topics: Cryptography ]

comments in descending chronological order (reverse):

#Comment Re: made: 2011-08-30 18:28:13.105727+00 by: Larry Burton

I'm going to pass this on to some people that are going to give me a blank stare. I deleted the DigiNotar certificate authority cert on my machine at the office and will also do so at home but I'm betting that < 1% of the people using the Internet will know enough to even wonder if they care.

#Comment Re: made: 2011-08-30 17:58:09.082873+00 by: Dan Lyke

How to delete the DigiNotar certicicate authority cert from your Firefox browser.

#Comment Re: made: 2011-08-30 14:21:01.39489+00 by: Dan Lyke

EFF: Iranian Man-in-the-Middle Attack Against Google Demonstrates Dangerous Weakness of Certificate Authorities

Google support thread on people dealing with the Iranian MitM attack.

#Comment Re: made: 2011-08-30 13:38:22.582606+00 by: Dan Lyke

http://arstechnica.com/securit...earlier-this-year-an-iranian.ars