On 11/04/2009 09:25 PM, Reed Loden:
Why do you think the certificate is bogus?
$ whois -h whois.iana.org external.int
Domain external.int not found.
This whois server only provides data for which IANA is authoritative,
including ".int" domains, ".arpa" domains, top level domains, and
some reserved names.
SSL certificates shouldn't be issued to domains that don't exist. ;)
I'm again not seeing the original posting, why doesn't it come through?
I see only your replies. Something with the mail <-> news gateway is
broken :S
Anyway.... to the subject, /external.int/ doesn't appear to be a valid
domain name, nor does it appear to have been valid at the time of
issuance, hence this certificates was not validated properly.
Additionally .int is a valid TLD managed by IANA directly.
--
Regards
Signer: Eddy Nigg, StartCom Ltd.
XMPP: [email protected]
Blog: http://blog.startcom.org/
Twitter: http://twitter.com/eddy_nigg
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security
