lynx-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: lynx-dev SSL error:unable to get local issuer certificate-Continue?


From: David Woolley
Subject: Re: lynx-dev SSL error:unable to get local issuer certificate-Continue? (y)
Date: Mon, 28 Apr 2003 21:12:14 +0100 (BST)

> Is there a way to get rid of this natsy message ?

This indicates that the site you are accessing may be an impostor.  You
will get an error or GUI browsers as well if you don't have the appropriate
root certificates.  Older versions of Lynx were extremely vulnerable to
man in the middle attacks (an impostor pretends to be the real site and
passes on your requests to the real site, but has access to the clear text.

If the site has a certificate signed by one of the standard certifying
organisations, you need to install the root certifcates properly.

If it has a root certificate from someone you trust, but not a standard
certifier (including the server certificate being, itself, self signed,
you should obtain it by secure means (preferably not be downloading it
over the internet).

If you don't trust the certifier, or the root certificate is unobtainable,
you should not suppress the warning, but treat the site as though it
were accessed over an clear text connection.

; To UNSUBSCRIBE: Send "unsubscribe lynx-dev" to address@hidden

reply via email to

[Prev in Thread] Current Thread [Next in Thread]