[cabfpub] China MITMing icloud.com

Ryan Sleevi sleevi at google.com
Tue Oct 21 10:01:57 MST 2014


The private key is also required to test, Gerv.
On Oct 21, 2014 9:51 AM, "Gervase Markham" <gerv at mozilla.org> wrote:

> On 21/10/14 15:41, Rich Smith wrote:
> > I have no way to independently verify that accusation,
>
> Actually, you do. The cert is here:
> http://www.mediafire.com/download/ampbnqncc277krv/fakeicloudcert.zip
>
> And Qihoo 360 is here:
> http://int.down.360safe.com/360browser/360browser7.5.2.110.exe
>
> If you have a copy of Windows and the ability to set up an SSL server
> and fiddle with your own DNS using a hosts file, you can test it all.
>
> I'm missing the copy of Windows... but I'm eager to hear what everyone
> else finds :-)
>
> Gerv
> _______________________________________________
> Public mailing list
> Public at cabforum.org
> https://cabforum.org/mailman/listinfo/public
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://cabforum.org/pipermail/public/attachments/20141021/0ec9b01e/attachment.html 


More information about the Public mailing list