Guard against week SSL certificates in Internet Explorer

By Winsockfix | Comments (2) | Trackbacks (0) | Email This Post Email This Post

If you're new here, you may want to subscribe to Windows Reference RSS feed Thanks for visiting!

A recently deomstrated vulnerability in the OpenSSL package on Debian Linux distribution has generated numerous certificates weak and are easy to crack. Many servers still use these weak certificates, even though it is impossible to establish a secure connection using them. The heise SSL Guardian checks the SSL certificates and warns you when it detects a weak one.


As always, it is important that you be very sure that the website is legitemate, if you choose to continue browsing the webpage. Also, you may report the certificate to report online to heise server.

Click here to download and install Heise SSL Guardian. The add-on works on Windows Vista/XP and earlier on Internet Explorer 7 and earlier. Once installed, Heise SSL Guardian will open a test page with a bad certificate to test if it works OK.

If you are a Firefox user, ensure you update to Firefox 3.0 and follow this article here to install Perspective & SSL Blacklist extensions to protect yourself on HTTPS websites.

  • Share/Bookmark

Did you enjoy this post? Why not leave a comment below and continue the conversation, or subscribe to my feed and get articles like this delivered automatically each day to your feed reader.

Tags: , , , , , , , ,
Topics: Internet Explorer

Trackbacks & Pingbacks

No trackbacks/pingbacks yet.

Comments

HHAHAHAHAahahahahaa….. Linux is soo secure, stop claming it guys……lol

Comment by Windows Admin on May 11, 2009 @ 12:21 pm

Be proud people! I have sent this spell check nightmare to Failblog.org.

Enjoy your day.

Comment by Mike K on May 19, 2009 @ 4:26 pm

Leave a comment

Line and paragraph breaks automatic, e-mail address never displayed, HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)