Re: Web Security IG - a proposal of actions from Albert Lunde on 2013-10-18 (public-web-security@w3.org from October 2013)

From: Albert Lunde <atlunde@panix.com>
Date: Fri, 18 Oct 2013 06:21:50 -0500
To: GALINDO Virginie <Virginie.GALINDO@gemalto.com>, "public-web-security@w3.org" <public-web-security@w3.org>
CC: Wendy Seltzer <wseltzer@w3.org>
Message-ID: <526119CE.8020603@panix.com>

An issue that has some effect on mobile devices are various sorts of 
proxies and wifi captive portals.

See
draft-nottingham-http-proxy-problem-00.txt
for a recent review of types

One of the ways to intercept SSL for various purposes is to spoof 
certificate authorities, which weakens security.

Received on Friday, 18 October 2013 11:22:12 UTC