[17634] in cryptography@c2.net mail archive
Re: Feature or Flaw?
daemon@ATHENA.MIT.EDU (Florian Weimer)
Fri Jul 8 15:26:38 2005
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: Florian Weimer <fw@deneb.enyo.de>
To: Lance James <lancej@securescience.net>
Cc: cryptography@metzdowd.com
Date: Tue, 05 Jul 2005 17:14:44 +0200
In-Reply-To: <42CAA322.1060603@securescience.net> (Lance James's message of
"Tue, 05 Jul 2005 08:11:30 -0700")
* Lance James:
>>Couldn't you just copy (or proxy all content) and get the same effect
>>without using frames at all?
> How would you go about doing that and still get the SSL Lock to remain
> as the banks? Can you give an example?
In both cases, you have the SSL lock on your own certificate.
At least my browser does not provide a user interface to access the
certificates of the servers from which embedded objects (or frames)
were downloaded.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com