Subject: Re: bug#16978: 24.3; SSL/TLS with multiple man-in-the-middle vulnerabilities

From: Ted Zlatanov <[email-masked]>
Date: Fri, 21 Mar 2014 06:24:44 -0400

On Thu, 20 Mar 2014 15:39:28 +0100 Lars Magne Ingebrigtsen <[email-masked]> wrote: 

LMI> Ted Zlatanov <[email-masked]> writes:
>> I think the self-signed certificates are the one we can omit, it's a
>> fairly rare use case.

LMI> No, it's quite common for mail servers and the like.

OK.  With a certificate manager UI, do you think this use case is
handled as I proposed, or do we need a more thorough solution here?

Ted