<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div>Right. So, the problem on my end was:</div><div><br></div><div> 1. I update Firefox.</div><div> 2. Upon restarting Firefox, CertWatch informs me it wants to update certificates.</div><div> 3. CertWatch then proceeds to pop up a procession of windows, each with cert data, each with "OK" and "Cancel" buttons.</div><div> 4. I see contradictory information in the cert data. But I trust that CertWatch knows what it is doing (which it did.) However, CertWatch doesn't tell me it is de-verifying those certs, merely that it is updating them. Being the first time so many certs are updated since I installed CertWatch, I was unaware of what exactly it was doing to them, until I went into Firefox's "View Certificates" area to see they "could not be verified for
unknown reasons."</div><div> 5. I mention the contradictory data on this list, because I find it interesting.</div><div><br></div><div>Perhaps CertWatch should add a notation during update notification, as to the nature of the update.</div><div><br></div><div><br></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><font size="2" face="Arial"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> Rick Moen <rick@linuxmafia.com><br><b><span style="font-weight: bold;">To:</span></b> conspire@linuxmafia.com<br><b><span style="font-weight: bold;">Sent:</span></b> Friday, September 9, 2011 10:27 AM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [conspire] Comodo-signed bogosity (was: DigiNotar Damage Disclosure)<br></font><br>Quoting Adrien Lamothe (<a ymailto="mailto:alamozzz@yahoo.com"
href="mailto:alamozzz@yahoo.com">alamozzz@yahoo.com</a>):<br><br>> Right. So what I was seeing, apparently, was CertWatch telling me<br>> those certs had been marked as bad, only it wasn't apparent that was<br>> what it was saying.<br><br>Not sure what you saw, really.<br><br>Just to elaborate on my comment to Ehud that there are always ways to<br>tunnel traffic out past dumb corporate firewalling:<br><a href="http://sebsauvage.net/punching/" target="_blank">http://sebsauvage.net/punching/</a> <- Best and most thorough<br><a href="http://www.nocrew.org/software/httptunnel.html" target="_blank">http://www.nocrew.org/software/httptunnel.html</a><br><a href="http://www.linuxhowtos.org/Security/sshproxy.htm" target="_blank">http://www.linuxhowtos.org/Security/sshproxy.htm</a><br><br><br>_______________________________________________<br>conspire mailing list<br><a ymailto="mailto:conspire@linuxmafia.com"
href="mailto:conspire@linuxmafia.com">conspire@linuxmafia.com</a><br><a href="http://linuxmafia.com/mailman/listinfo/conspire" target="_blank">http://linuxmafia.com/mailman/listinfo/conspire</a><br><br><br></div></div></div></body></html>