Tag Info

Hot answers tagged

75

Since HTTPS is designed to prevent snooping, Microsoft Family Safety would be unable to monitor the encrypted traffic unless it performs what is essentially a man-in-the-middle attack. It accomplishes this by decrypting and re-encrypting communications using Microsoft's own key. Such tampering, of course, does not go unnoticed. Firefox dutifully reports ...


15

They're hurrying to obtain certificates from a CA that supports SHA-2 for certificate signing. When a CA "issues" a certificate, it digitally signs a hash of that certificate. The hash used to be in the MD5 algorithm; when MD5 turned out to be completely insecure, SHA-1 became the new recommendation, but it took many years for most websites to migrate from ...


4

If you check the Google certificate details, you will notice that there is an entry named "Not Valid Before: xxxx". In this case, the value is November 20th. If your computer time was set before November 20th, the certificate would not be valid and you would get the mentioned error.


2

Besides adding them to the local store at 'Trusted Publishers' and 'Trusted Root Certification Authorities', you have to edit the Group Policy, either locally or on the domain level to allow trusting. For SCUP/WSUS updates using a code signing cert I used a GPO to "Allow signed updates from an intranet Microsoft update service location" under ...


1

Let's say Google's certificate expires on 01/01/2015 and Bing's certificate on 01/01/2016. If you set your clock to 07/01/2015 you will get an error (certificate expired) when accessing Google, and will not when accessing Bing. They don't use the same certificate, each one have their own certificate.



Only top voted, non community-wiki answers of a minimum length are eligible