Langsung ke konten utama

Postingan

Menampilkan postingan dengan label protocol

Avoid “Man-in-the-Middle” Attacks With Perspectives

The Perspectives Firefox Extension is a useful free add-on for Firefox that improves the usability of the browser and provides an additional layer of security when connecting to sites using SSL. When you use a protocol like SSL to connect to a secure web site, your communication with that site is vulnerable to a “ man-in-the-middle ” attack unless you’re able to identify the remote server in a secure manner. Most sites can be securely identified because they buy a certificate from a Certificate Authority like VeriSign. Unfortunately, as certificates can be expensive and tricky to administer, some sites prefer to self-certify, and some have expired certificates. Attempting to connect to one of these sites will lead to Firefox issuing the “Website Certified by Unknown Authority” warning that you’ve probably seen many times: Have you ever just clicked “OK” to accept a certificate without checking it out? Most of the time, it’s probably fine, but you could be leaving yo...