4 ms·
Or inject an exploit into the stream and compromise the system being used to view it.
by dpeck 13y ago
Or inject an exploit into the stream and compromise the system being used to view it.
- taeric 13y agoI would not think that is much of a threat here in this scenario. The threat is really that Schneier is no longer who he said he is, since it has not been validated recently. That is, his certificate, purchased and verified through an authority, has reached the age where that authority no longer guarantees that he is the one holding it. As such, someone else could have taken over his person and began acting maliciously. Right? Edit: So, my question "Right?" was a legitimate question. If I am wrong, I'd like to know how. Note that this is an expired, non revoked certificate scenario we are talking about. Meaning the identity was established before, and to nobody's knowledge has it been stolen. Simply now that identity has not been established for a long time.
- jessaustin 13y agoSo you never browse to sites that don't use TLS? That seems far more limiting than say, keeping your browser up to date and keeping Java turned off.