<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<br>
On 06/14/2013 05:46 PM, From Gervase Markham:
<blockquote cite="mid:51BB2CD5.1010601@mozilla.org" type="cite">
What do you mean by "can be accessed with a browser"? There's been
nothing said which suggests that these devices talk HTTP to their
servers. <br>
</blockquote>
<br>
Perhaps read the communication preceding your replies where Rick
explicitly confirmed that they are used on HTTP servers using HTTP
over SSL/TLS.<br>
<br>
<blockquote cite="mid:51BB2CD5.1010601@mozilla.org" type="cite">Er
no, a key which gets cracked due to small size can't be used for
anything other than impersonating the sites whose names are
embedded in
it.</blockquote>
<br>
Sure, but if that's your argument, why should we care AT ALL which
keys sizes end-user certificates use then? I mean if Google wants to
use 1024 bit keys let'em, it's only their sites that get
compromised. For that matter any other site...<br>
<br>
If you confirm, I propose that we don't impose any requirement as to
the key size of end-user certificates, anything will go...<br>
<br>
<blockquote cite="mid:51BB2CD5.1010601@mozilla.org" type="cite">There's
no point talking about "512-bit keys" as a whole, because
there's a massive difference between a 512-bit intermediate, which
if
cracked can issue for any site on the Net, and a 512-bit leaf
cert,
which if cracked allows someone to imitate only the site for which
it
was issued.
</blockquote>
<br>
To all of my knowledge the 512 bit key certificates compromised
recently were end-user certificates and IIRC Mozilla disabled the CA
certificate that issued them. No CA certificates were compromised at
that time. Can you explain the logic to disable that Malaysian CA
then?<br>
<br>
<br>
<div class="moz-signature">
<table border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td colspan="2">Regards </td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
<tr>
<td>Signer: </td>
<td>Eddy Nigg, COO/CTO</td>
</tr>
<tr>
<td> </td>
<td><a href="http://www.startcom.org">StartCom Ltd.</a></td>
</tr>
<tr>
<td>XMPP: </td>
<td><a href="xmpp:startcom@startcom.org">startcom@startcom.org</a></td>
</tr>
<tr>
<td>Blog: </td>
<td><a href="http://blog.startcom.org">Join the Revolution!</a></td>
</tr>
<tr>
<td>Twitter: </td>
<td><a href="http://twitter.com/eddy_nigg">Follow Me</a></td>
</tr>
<tr>
<td colspan="2"> </td>
</tr>
</tbody>
</table>
</div>
<br>
</body>
</html>