[prev in list] [next in list] [prev in thread] [next in thread] 

List:       outages-discussion
Subject:    Re: [Outages-discussion] ADVANCE WARNING: Google moving to 2048-bit SSL and root keys
From:       Jimmy Hess <mysidia () gmail ! com>
Date:       2013-05-25 1:34:26
Message-ID: CAAAwwbW9nRHDj2QbGmJ_YDsfAuCAO+LhB9sDtJe3SPOxkP2xAA () mail ! gmail ! com
[Download RAW message or body]

On 5/24/13, Jay Ashworth <jra@baylink.com> wrote:


Hm..  this might be no big deal if not for public key pinning and CA
pinning in modern browsers of certain sites,  they could just get
themselves 2048 bit certificates from any CA...

So what could otherwise be a routine certificate change, may have some
unusual extra baggage attached to it -- requiring end users performing
software code update in their only slightly outdated browsers,
instead of just switching certificates,   so they stop getting big red
SSL errors when trying to perform searches via Google...


> Via PRIVACY Forum:
>
> ----- Forwarded Message -----
>> From: "PRIVACY Forum mailing list" <privacy@vortex.com>
>
>> Google moving to longer SSL keys
>>
>> http://j.mp/10YAWaC (Google Online Security Blog)

--
-JH
_______________________________________________
Outages-discussion mailing list
Outages-discussion@outages.org
https://puck.nether.net/mailman/listinfo/outages-discussion
[prev in list] [next in list] [prev in thread] [next in thread]