[159253] in North American Network Operators' Group
Re: Gmail and SSL
daemon@ATHENA.MIT.EDU (John R. Levine)
Wed Jan 2 17:38:25 2013
Date: 2 Jan 2013 17:38:16 -0500
From: "John R. Levine" <johnl@iecc.com>
To: "William Herrin" <bill@herrin.us>
In-Reply-To: <CAP-guGVkVVRP4YNnQkij2pZcFDLPeGQ2qAB5o_QAxM=Mtp-Vhg@mail.gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
> Are you, at this moment, able to acquire a falsely signed certificate
> for www.herrin.us that my web browser will accept?
Me, no, although I have read credible reports that otherwise reputable SSL
signers have issued MITM certs to governments for their filtering
firewalls.
Regards,
John Levine, johnl@iecc.com, Primary Perpetrator of "The Internet for Dummies",
Please consider the environment before reading this e-mail. http://jl.ly
