Ian G wrote:
I've just upgraded my Firefox to 1.0.2 and this time the FreeBSD version handles plugins, so I installed both of them. Unfortunately petname doesn't appear.
OK, Ping just fixed me up there, it had to be dragged from the pallete. Now it's sitting there and I have petnamed two of my SSL sites. More to come as they turn up no doubt.
It's quite easy, quite intiutive.
The petnaming sits alongside the trustbar, and for example, I have the petname describing it how I typed it in, and the Trustbar saying
Tiggee Identified by Comodo Limited
! Just to add to the fun of using the names in the certs, where Tiggee came from I don't know, as it certainly isn't the name of the website (which is https://www.dnsmadeeasy.com/ ... named and Shamed!!)
But the Trustbar allows me to also change Tiggee to whatever I want. So it does the same job.
It could be that both of these tools will converge. They could both include a configuration option that says something like "treat as untrusted OR suggest name from Cert"... the security argument for petnames suggests that this *not* be done, but I'm not sure whether this will survive in the real world!
Either way, for your *average user* Firefox will be much safer - protected from phishing - with either of these toolbars installed.
-- News and views on what matters in finance+crypto: http://financialcryptography.com/ _______________________________________________ Mozilla-security mailing list [email protected] http://mail.mozilla.org/listinfo/mozilla-security
