[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

RE: [SIGNATUR] ComputerWorld: Alvorlig sikkerhedsbrist ved TDC-signatur

Hej Carsten,

DET LYDER MEGET INTERESSANT!!!! Er der nogen, der kender mere til dette????

Er der nogen (ved samme lejlighed), der er så dybt inde i Mozilla og ved om man kan tilgå browseren keystore? Dette er relevant for OpenSign komponenten.

Dog:
Hvis det er PKCS#11-snittet du henviser til er det ikke helt problemfrit :-(

Venlig hilsen
Peter Lind Damkjær
TDC Erhverv

-----Original Message-----
From: Carsten Sxrensen [mailto:sslug@sslug 
Sent: 12. maj 2004 10:17
To: sslug@sslug
Subject: RE: [SIGNATUR] ComputerWorld: Alvorlig sikkerhedsbrist ved TDC-signatur


Peter Lind Damkjær <sslug@sslug> wrote in
news:sslug@sslug: 
> Du har ret i at brugere efterfølgende KAN manipulere sig ud af 
> passwordkravene

I har endda selv givet et nyt smuthul jf. 

> - Der laves en særlig webside med eksport fra TDC CSP til 
> pkcs12-filformat (med diverse advarsler)

Det virker bagvendt at lukke muligheden for at oprette certifikater for 
dernæst at lave et smuthul.

Men lidt mere konstruktivt - Mozilla kan mig bekendt også benytte 
tredjeparts CSP'er, det havde vel været den rigtige løsning hvis man mener 
sikkerheden i den indbyggede er for dårlig. Skulle det mon være en del af 
Open Source initiativet?


Carsten Sørensen

 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 20:34 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *