[144533] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Microsoft deems all DigiNotar certificates untrustworthy, releases

daemon@ATHENA.MIT.EDU (Peter Kristolaitis)
Tue Sep 13 10:50:32 2011

Date: Tue, 13 Sep 2011 10:48:21 -0400
From: Peter Kristolaitis <alter3d@alter3d.ca>
To: nanog@nanog.org
In-Reply-To: <CACg3zYHrY7g1NhrrKGs=oPFKryr8pfvsrr=pxB5DY78Simx85Q@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

Really?  You can "just connect" with SSH?

root@somebox:~# ssh 1.2.3.4
The authenticity of host '1.2.3.4 (1.2.3.4)' can't be established.
RSA key fingerprint is 03:26:2c:b2:cd:fd:05:fc:87:70:4b:06:58:40:e7:c3.
Are you sure you want to continue connecting (yes/no)?

That's no different that having to permanently accept a self-signed SSL 
cert...

- Pete


On 9/13/2011 10:29 AM, Tei wrote:
> *a random php programmer shows*
>
> He, I just want to self-sign my CERT's and remove the ugly warning that
> browsers shows. I don't want to pay 1000$ a year, or 1$ a year for that. I
> just don't want to use cleartext for internet data transfer.  HTTP is like
> telnet, and HTTPS is like ssh. But with ssh is just can connect, with
> browsers theres this ugly warning and "fuck you, self-signed certificate"
> from the browsers.  Please make the pain stop!.
>
> --Tei
>



home help back first fref pref prev next nref lref last post