Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos network security services platform







Full Disclosure: Re: FD / lists.grok.org - bad SSL cert

Re: FD / lists.grok.org - bad SSL cert

From: Avraham Schneider <avri.schneider_at_gmail.com>
Date: Tue, 6 Jan 2009 16:36:09 +0200

On Tue, Jan 6, 2009 at 12:04 PM, Gary Wilson <dragon_at_dragons.org.uk> wrote:
>
> On Mon, January 5, 2009 19:01, James Matthews wrote:
>> SSL certs cost money. This one works the same. etc..
>>
>
> Well whilst I agree the self generated ones or whatever work well, I find
> it amusing that a _security_ based list is using one, and then expects
> people in the security industry to blindly accept or add exceptions for it
> - my irony alarm is going overtime at that one. I certainly wouldn't add
> an exception, as it's not a trusted website to me. I'm sure others would
> see it the same.
What's the worst case? Someone sniffing your unsub request?
It's not like an e-commerce website. I don't see why FD should even
have SSL in the first place.

I would guess the webmaster simply added SSL to allow those who have
port 80 to full-disclosure (containing malicious code) filtered...

I think you are over-dramatizing 'the irony'.

>
> Doesn't matter now, as I'm unsubbed via the mail method, because FD just
> has too much noise-signal these days.
>
>
>
> --
> / Gary Wilson, aka dragon/dragonlord/dragonv480 \
> .'(_.------. e: dragon_at_northernscum.org.uk MSN: dragonv480 .------._)`.
> < _ | FB: http://profile.to/gary_wilson_horse_dentist/ | _ >
> `.( `------' w: http://volvo480.northernscum.org.uk `------' ).'
> \ w: http://www.northernscum.org.uk /
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
Received on Jan 06 2009

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]