[JDEV] SSL & Valid Certificates

[Robert Temple]

I am using the crypto API, so I will use the Windows Certificate store.
Thanks for the feedback, I will let the users know when there is a 
problem with a cert.

-Robert

> -----Original Message-----
> From: Michael F Lin [mailto:MFLIN at us.ibm.com]
> Sent: Wednesday, April 17, 2002 2:48 PM
> To: jdev at jabber.org
> Subject: Re: [JDEV] SSL & Valid Certificates
> 
> 
> 
> I would say that if you have access to system certificate 
> APIs and stores
> (e.g. the Windows CryptoAPI, or whatever Mozilla uses), it might be
> worthwhile to verify the certificate chain. Otherwise I would 
> say it is
> unlikely to be worthwhile to expend the programmatic effort 
> of maintaining
> your own certificate stores and so on. Jabber traffic in general is
> unlikely to be worth the effort necessary to hijack a DNS 
> name and set up a
> server with bogus certificates, and if it is that sensitive 
> it should rely
> on something more end-to-end than TLS.
> 
> -Mike
> 
> 
> 
> |---------+---------------------------->
> |         |           Robert Temple    |
> |         |           <Robert.Temple at di|
> |         |           g.com>           |
> |         |           Sent by:         |
> |         |           jdev-admin at jabber|
> |         |           .org             |
> |         |                            |
> |         |                            |
> |         |           04/14/2002 02:55 |
> |         |           AM               |
> |         |           Please respond to|
> |         |           jdev             |
> |         |                            |
> |---------+---------------------------->
>   
> >-------------------------------------------------------------
> -----------------------------------------------------------------|
>   |                                                           
>                                                                    |
>   |       To:       "'jdev at jabber.org'" <jdev at jabber.org>     
>                                                                    |
>   |       cc:                                                 
>                                                                    |
>   |       Subject:  [JDEV] SSL & Valid Certificates           
>                                                                    |
>   |                                                           
>                                                                    |
>   |                                                           
>                                                                    |
>   
> >-------------------------------------------------------------
> -----------------------------------------------------------------|
> 
> 
> 
> Should clients that support SSL connections to a jabber 
> server check to
> make sure that the servers certificate is valid?  i.e. check 
> if the names
> match, the root is trusted, its not expired, etc.   If they 
> should then I
> plan to tell the user that there is an issue with the certificate like
> Internet Explorer does, and ask them if they want to remain connected.
> 
> Thanks,
> Robert
> 
> 
> 
> _______________________________________________
> jdev mailing list
> jdev at jabber.org
> http://mailman.jabber.org/listinfo/jdev
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.jabber.org/jdev/attachments/20020417/742855d2/attachment-0002.htm>