Re: Certificate Hijacking

2011-04-18 Thread Tim Law
Cautionary note taken Ronni. CRL back on. Tim On 18/04/2011, at 11:54 AM, Ronda Brown wrote: Hi Tim WAMUG Members, So you have to chose between Security and the Mac App Store? By turning off that list you are opening up your system to software that could pose a threat to your

Re: Certificate Hijacking

2011-04-18 Thread Peter Hinchliffe
On 18/04/2011, at 11:54 AM, Ronda Brown wrote: Hi Tim WAMUG Members, So you have to chose between Security and the Mac App Store? By turning off that list you are opening up your system to software that could pose a threat to your machine and data. Well, given the inconvenience I was

Re: Certificate Hijacking

2011-04-18 Thread Ronda Brown
Fair enough Peter, As I mentioned in my previous email, I'm only posting to inform WAMUG members of the implications of turning off this security setting. If people feel ok doing this, that's fine by me, it is their decision. You are quite prepared to take the risk and that is your

Re: Certificate Hijacking

2011-04-17 Thread Peter Hinchliffe
On 16/04/2011, at 2:22 PM, Stuart Breden wrote: Thanks Ronni. Stuart Breden PO Box 132 Kalamunda WA 6926 Ph: (08) 9257 1577 Mbl: 0417 053 266 On 25/03/2011, at 3:13 PM, Ronda Brown wrote: Hello WAMUGers, Recently there was announced 'certificate hijacking' when using the web

Re: Certificate Hijacking

2011-04-17 Thread Ronda Brown
there was announced 'certificate hijacking' when using the web to access SSL (Secure Sockets Layer) sites. I checked my Keychain to see what was the ‘Default’ setting; to find that OCSP is not enabled by Default. It is OFF. To Enable it: 1. Open Keychain Access from Applications Utilities

Re: Certificate Hijacking

2011-04-17 Thread Peter Hinchliffe
On 18/04/2011, at 8:23 AM, Ronda Brown wrote: I've had to set CRL (Certificate Revocation List) back to Off on my system. Having it turned on was slowing the performance of the Mac Store app to the point of complete uselessness. I've left OSCP on without detrimental effect. Hi

Re: Certificate Hijacking

2011-04-17 Thread Ronda Brown
On 18/04/2011, at 8:49 AM, Peter Hinchliffe wrote: On 18/04/2011, at 8:23 AM, Ronda Brown wrote: I've had to set CRL (Certificate Revocation List) back to Off on my system. Having it turned on was slowing the performance of the Mac Store app to the point of complete uselessness.

Re: Certificate Hijacking

2011-04-16 Thread Stuart Breden
Thanks Ronni. Stuart Breden PO Box 132 Kalamunda WA 6926 Ph: (08) 9257 1577 Mbl: 0417 053 266 On 25/03/2011, at 3:13 PM, Ronda Brown wrote: Hello WAMUGers, Recently there was announced 'certificate hijacking' when using the web to access SSL (Secure Sockets Layer) sites. I checked my

Certificate Hijacking

2011-03-25 Thread Ronda Brown
Hello WAMUGers, Recently there was announced 'certificate hijacking' when using the web to access SSL (Secure Sockets Layer) sites. I checked my Keychain to see what was the ‘Default’ setting; to find that OCSP is not enabled by Default. It is OFF. To Enable it: 1. Open Keychain Access from

Re: Certificate Hijacking

2011-03-25 Thread David Nicholas
Ronni Thanks for the advice which I have followed. But I don't understand what 'certificate hijacking' is. It sounds bad. Can you explain it briefly? David Nicholas On 25/03/2011, at 3:13 PM, Ronda Brown wrote: Hello WAMUGers, Recently there was announced 'certificate hijacking' when

Re: Certificate Hijacking

2011-03-25 Thread Ronda Brown
Hi David, On 25/03/2011, at 3:29 PM, David Nicholas wrote: Ronni Thanks for the advice which I have followed. But I don't understand what 'certificate hijacking' is. It sounds bad. It is! Can you explain it briefly? Not really briefly, as I don’t know how much you understand about

Re: Certificate Hijacking

2011-03-25 Thread cm
Thanks Ronni for the sound advice and the clear explanation! Cheers, Carlo On 2011-03-25, at 16:16, Ronda Brown wrote: Hi David, On 25/03/2011, at 3:29 PM, David Nicholas wrote: Ronni Thanks for the advice which I have followed. But I don't understand what 'certificate hijacking

Re: Certificate Hijacking

2011-03-25 Thread David Nicholas
. But I don't understand what 'certificate hijacking' is. It sounds bad. It is! Can you explain it briefly? Not really briefly, as I don’t know how much you understand about Secure sites and Security. I’ll try to give a brief explanation. The Security Part: When you surf the web, you