Welcome, Guest. Please login or register.

Author Topic: OWB - Can't Login to some pages. Error 60:  (Read 2392 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline Piru

  • \' union select name,pwd--
  • Hero Member
  • *****
  • Join Date: Aug 2002
  • Posts: 6946
    • Show all replies
    • http://www.iki.fi/sintonen/
Re: OWB - Can't Login to some pages. Error 60:
« on: June 25, 2010, 10:08:52 AM »
Quote from: XDelusion;567143
In answer to my own question:

Settings

Prefs

Security

Ignore SSL Errors.

----------

Is this secure for Ebay and the like?
You should only enable this option temporarily, as if this option is enabled any certificate will be accepted. This will make it possible to perform man-in-the-middle attack, even when SSL/TLS (https://) is used.

I think Fab is considering adding per site preferences to OWB, much like in other browsers. Then you could allow the self-signed certificate for the specific sites alone.

I wonder though, what did you do exactly ("I turned on my cache and all that jazz") to when you began to get these problems for valid certificates? Maybe OWB doesn't work correctly with certain kind of proxies?
« Last Edit: June 25, 2010, 10:14:54 AM by Piru »
 

Offline Piru

  • \' union select name,pwd--
  • Hero Member
  • *****
  • Join Date: Aug 2002
  • Posts: 6946
    • Show all replies
    • http://www.iki.fi/sintonen/
Re: OWB - Can't Login to some pages. Error 60:
« Reply #1 on: June 25, 2010, 10:32:25 AM »
Quote from: XDelusion;567151
How would one attack a MorphOS machine anyhow?
Well, assuming the attacker would get access to your network connection they could present their own ebay site (with https and all) and steal your logins. Same for your banking site. It's not very likely attack scenario if you're connecting with wired DSL connection however. It has been known to happen when using open WLAN connections.

As you can see this is somewhat theoretical.

But disabling SSL/TLS certification verification makes it easier for someone to perform such an attack.
« Last Edit: June 25, 2010, 10:36:23 AM by Piru »