Re: Link to a website with a faked SSL Certificate - Mailing list pgsql-www

From Stefan Kaltenbrunner
Subject Re: Link to a website with a faked SSL Certificate
Date
Msg-id 4E7ACA60.3000701@kaltenbrunner.cc
Whole thread Raw
In response to Link to a website with a faked SSL Certificate  (Thomas Oftring <thomas.oftring@googlemail.com>)
Responses Re: Link to a website with a faked SSL Certificate
List pgsql-www
On 09/21/2011 09:12 PM, Thomas Oftring wrote:
> Hello,
> 
> I would like to  get the slides from the Postgres Open Talks 2011 Wiki
> Page but if I click on the link to the slides "Migration to PostgreSQL
> - preparation and methodology" Firefox warns for a suspect SSL
> certificate. A collegue accepted the SSL certificate an got a trojan
> virus on his windows pc.
> 
> Please check the link before more people get problems with it.

I'm not sure what you are actually referring to - the link for that
particular presentation is not to a https site.
However the server in the url IS actually supporting HTTPS (using a self
signed cert) but I can't see a way at all how your collegue might have
gotten a trojan from that server.
Are you really sure that your collegue got infected from clicking the
link to the url http://bunsen.credativ.com/~jco/2011/migrating.pdf or is
that mostly based on the theory "the unknown cert was the only odd thing
that happened that day so it must have been that page?


Stefan


pgsql-www by date:

Previous
From: Thomas Oftring
Date:
Subject: Link to a website with a faked SSL Certificate
Next
From: Linas Virbalas
Date:
Subject: pgsql-hackers subscription not working