Timeline for How to decode traffic on a LAN whose SSL certificates are expired
Current License: CC BY-SA 3.0
6 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Nov 3, 2014 at 17:40 | comment | added | kasperd | Past experiences with expired certificates does make users more likely to ignore certificate warnings in the future. But on top of that there has been examples of browsers that would only display the first problem they noticed about the certificate. If the user decides to ignore an expired certificate the browser might simply not check anything else about the certificate. | |
Nov 3, 2014 at 16:11 | comment | added | cpast | @MattNordhoff Added to answer. | |
Nov 3, 2014 at 16:11 | history | edited | cpast | CC BY-SA 3.0 |
added 671 characters in body
|
Nov 3, 2014 at 13:31 | vote | accept | Manny265 | ||
Nov 3, 2014 at 5:24 | comment | added | Matt Nordhoff | Expired certificates do have one security disadvantage: It's impossible to tell whether they've been revoked. CRLs and OCSP servers only have to report the status of certificates that are in date. | |
Nov 3, 2014 at 4:01 | history | answered | cpast | CC BY-SA 3.0 |