Seitics.de Weblog

SEITICS - Das ist die Wahrheit.

Site upgraded to support SSL

No comments

Today during a coffee break I upgraded the site to SSL, so you can now surf to https://www.seitics.de as well and have a little bit more privacy. The web server will only accept ciphers from the Payment Card Industry (PCI) Data Security Standard which basically means no symmetric key sizes below 128 bits, no SSLv2 and no broken ciphers either.

You will need to install the embinet GmbH Global Root CA which you can get as a certificate file or by downloading and executing embinet's Windows executable installer which will let you add the Root CA's certificate to your Firefox profile and Windows certificate store automatically.

If you don't install the certificate you will get some nasty warnings that the site is using an invalid certificate bla bla might be forged bla bla... well in essence the message says that the owner of this site didn't really feel like paying the certificate monopolists money for 'perfect' authenticity. Just wait a couple of weeks for someone to subvert your browsers security which would enable the attacker to add any root certificate he likes anyway. The certificate system is not the weakest link by far, you are.

Written by Stephan

Thursday 11 December 2008 at 16:09

Posted in English, General

Used tags: , ,

No comments

Leave a Reply

  
Emoticons

To make sure you are human, please answer the question.
 



Remember personal info:   
Hide email:   

Small print: All html tags except <b> and <i> will be removed from your comment. You can make links by just typing the url or mail-address.