<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">FWIW, my commentary. Sorry if this is getting too off-topic.<div><br></div><div><a href="http://freedom-to-tinker.com/blog/sjs/web-browsers-and-comodo-announce-successful-certificate-authority-attack-perhaps-iran">http://freedom-to-tinker.com/blog/sjs/web-browsers-and-comodo-announce-successful-certificate-authority-attack-perhaps-iran</a></div><div><br><div><div>On Mar 23, 2011, at 3:18 PM, Robert Malmgren wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">
<div bgcolor="#ffffff" text="#000000">
After Jacobs first sign of warnings, and the bad <a href="http://addons.mozilla.org">addons.mozilla.org</a>,
now there is a more complete list of frauded certs.<br>
<br>
These certificates affect the following Web properties:
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td class="listBullet" valign="top">•</td>
<td class="listItem"><p><a href="http://login.live.com">login.live.com</a></p>
</td>
</tr>
<tr>
<td class="listBullet" valign="top">•</td>
<td class="listItem"><p><a href="http://mail.google.com">mail.google.com</a></p>
</td>
</tr>
<tr>
<td class="listBullet" valign="top">•</td>
<td class="listItem"><p><a class="moz-txt-link-abbreviated" href="http://www.google.com/">www.google.com</a></p>
</td>
</tr>
<tr>
<td class="listBullet" valign="top">•</td>
<td class="listItem"><p><a href="http://login.yahoo.com">login.yahoo.com</a> (3 certificates)</p>
</td>
</tr>
<tr>
<td class="listBullet" valign="top">•</td>
<td class="listItem"><p><a href="http://login.skype.com">login.skype.com</a></p>
</td>
</tr>
<tr>
<td class="listBullet" valign="top">•</td>
<td class="listItem"><p><a href="http://addons.mozilla.org">addons.mozilla.org</a></p>
</td>
</tr>
<tr>
<td class="listBullet" valign="top">•</td>
<td class="listItem"><p>"Global Trustee"</p>
</td>
</tr>
</tbody>
</table>
<br>
This seem to be a very bad situation, afaik.<br>
<br>
For more info, see<br>
<a class="moz-txt-link-freetext" href="https://www.microsoft.com/technet/security/advisory/2524375.mspx">https://www.microsoft.com/technet/security/advisory/2524375.mspx</a><br>
<br>
<pre class="moz-signature" cols="72">--r
---
Robert Malmgren Encrypted e-mail preferred
E-mail: <a class="moz-txt-link-abbreviated" href="mailto:rom@romab.com">rom@romab.com</a> PGP RSA 4096, id: 0x5B979EF5
Cellular: +46(0)708-330378 Fingerprint: DE59 D86C 4CAF 2E59 A64E
Jabber: <a class="moz-txt-link-abbreviated" href="mailto:rom@romab.com">rom@romab.com</a> 5476 2360 F1B4 5B97 9EF5</pre>
</div>
</blockquote></div><br></div></body></html>