When I look at my "certificates" in Firefox, for Gmail, for example, it says SHA1 fingerprint and MD5 fingerprint, e.g., for Thawte SGC CA (i.e., mail.google.com).
Does this mean this is a site that can easily be compromised?
If so, what do we do in Firefox 3.0.5 on Windows to protect from a spoofed site?
I noticed 97% of the errant certificates are signed by the budget operation RapidSSL.
Is there a way to delete just the RapidSSL certificates from Firefox?
When I looked in my browser, all the certificates had an MD5 hash so I wasn't sure which ones to delete for safety.
There was good information here that only the Equifax was compromised so far so I've deleted all the Equifax certificates in my browser.
Is there a way to protect ourselves today from this flaw?
Bummer. According to
Out of the 30,000 certificates we collected, about 9,000 were signed using MD5, and 97% of those were issued by RapidSSL."
I found the answer. Yes. We have to look inside the certificate to see the "tumor", which is relatively easy to find once you know what to look for.
Mozilla did release an advisory
To find certificate vulnerable to pharming, in Mozilla,
Tools > Options > Advanced > Encryption > View Certificates Select a certificate View > Details > Certificate Signature Algorithm
Have something to add? Share your thoughts — no account required.
Ask the community — no account required
