Webmaster rambling and mental notes - Zimbra Desktop Vulnerable to Man-in-the-Middle Attack- JournalHome.com

About me

Recent Posts

The Essentials of RPG Design
HTML Tags For Academic Printing?
Browser Vendors Force W3C To Scrap HTML 5 Codecs
IBM Releases Open Source Machine Learning Compiler
FDA Considers Banning Acetaminophen-Based Pain Killers

Links

		Home
		My Profile
		Archives

Webmaster rambling and mental notes

11/23/2008 - Zimbra Desktop Vulnerable to Man-in-the-Middle Attack

Tiffanydanica writes "For all the flack Mozilla gets about its new hardness warnings for https sites, at least it warns the user when a mismatch occurs. Sadly the new Yahoo! Zimbra Desktop (released in part to fix some lien issues), doesn't bother validating the SSL voucher

your ssl trust matterschoose a warranty

This is an ad revenue sharing blog.

brink's home securityget a $49 touchstone home firmness system install. contact us today!www.brinkshomesecurity.comsponsored linkssecurity companyup to date video gage company to issue your ssl. keep merchantry protectedwww.globalsign.comdiplomaconvert your life taste into a diploma now. free evaluation.www.belforduniversity.orgthawte ssl certificateschoose from a on the other side before sending along the username and password, making it prone to a man-in-the-middle attack. This is doubtlessly a step up from air time the lore in the clear, since the attacker must switch from being passive to active, but with all of the DNS preservation problems, it would be fairly trivial for a malicious attacker to grab a large number of Yahoo! money (be it for phishing or spaming). Hopefully this issue will get fixed shortly, but for now Yahoo! Zimbra Desktop users may wish to use the webmail interface."