[Users] [Bug 2718] Failure to check peer hostname when checking certificate

noreply at thewildbeast.co.uk noreply at thewildbeast.co.uk
Thu Aug 9 13:35:34 CEST 2012


http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=2718





--- Comment #8 from Ricardo Mones  2012-08-09 13:35:33 ---
IMHO if the hostname doesn't match certificate name then the admin should also
fix the certificate, otherwise I think we're leaving these known ones
vulnerable to MITM attacks.

But it may happen I had not understood it well, so more insight welcome.

-- 
Configure bugmail: http://www.thewildbeast.co.uk/claws-mail/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.



More information about the Users mailing list