Is it a legit CA or is it an MITM attack on a gateway level ?

Is it a legit CA or is it an MITM attack on a gateway level ?

geoffrey mendelson geoffreymendelson at gmail.com
Thu Feb 17 16:45:15 IST 2011


On Feb 17, 2011, at 4:31 PM, Boris shtrasman wrote:

> Hi ,
>
> Is it a legit CA or is it an MITM attack on a gateway level ?
>
> Tested  - no arp poisoning.
> Getting incorrect CA from google imap servers (but correct for  
> https) I belive that this some one on the infrastructure level.
>

Gmail occasionaly presents bad certificates. If it bothers you, close  
your email client and come back later. This usually seems to happen  
when a backup server from out of the US gets activated and someone  
forgot to update the certificates.

Geoff.

-- 
Geoffrey S. Mendelson,  N3OWJ/4X1GM
Those who cannot remember the past are condemned to misquote it.











More information about the Linux-il mailing list