![]() Restart Firefox (see below for option two). ![]() After I install firefox, I rename libnssckbi.so to something else (like libnssckbi.so.saved). I generally use FreeBSD and Debian-based linux distributions for my operating systems. I used to rely on the Certificate Patrol Firefox Extension to monitor changing certs. Seth from the EFF has a quick post about possible concerns over the CAs in your browser. The group asked me to document my Firefox setup and what life is like without any trusted CAs. Apparently my admission was a shocking statement to many. During the discussion, it came up that I disable all of the Certificate Authorities in my systems and selectively trust the ssl certificates from individual websites. The general idea is to stop local traffic snooping and provide more security by default. At Libreplanet 2010, I was in a discussion with the MonkeySphere and EFF folks about how to encourage every website to offer ssl by default.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |