Page 2 of 2

Re: Certificate Domain stuff?

Posted: Sun Jul 31, 2016 10:00 am
by Lyberta
I'm surprised so much ppl here ignored the warnings and kept connecting using a bad cert. This is so insecure.

Re: Certificate Domain stuff?

Posted: Sun Jul 31, 2016 7:41 pm
by GraysonPeddie
FaTony wrote:I'm surprised so much ppl here ignored the warnings and kept connecting using a bad cert. This is so insecure.
That's because we are tech-savvy.

To quote from the article: http://www.cnet.com/news/web-users-igno ... -warnings/
In an online study conducted among 409 participants, the researchers found that the majority of respondents would ignore warnings about an expired Secure Sockets Layer (SSL) certificate. The more tech-savvy the user, the more likely they would be to ignore it, the study found.
(Emphasis added.)

Re: Certificate Domain stuff?

Posted: Sun Jul 31, 2016 11:58 pm
by Lyberta
What the hell. I'm tech-savvy myself and I would never connect to anything using a bad cert. I sometimes even manually compare fingerprints to ensure that no MITM is in use.

Re: Certificate Domain stuff?

Posted: Mon Aug 01, 2016 2:02 am
by tux99
raboof wrote: Even better, I fixed the SSL configuration :).
Great, looks good, many thanks!