Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

The USERTRUST Network

6,270 views
Skip to first unread message

David E. Ross

unread,
Nov 25, 2011, 7:15:27 PM11/25/11
to mozilla-dev-s...@lists.mozilla.org
In Thunderbird 8.0 and SeaMonkey 2.5, I see 10 site certificates added
as exceptions, all issued by The USERTRUST Network and tracing back to
UTN-USERFirst-Hardware. Why was this done?

The excepted domains include addons.mozill.org, several instances of
login.yahoo.com, and www.google.com. For the addons.mozilla.org
exception -- and apparently the other exceptions since they all trace to
the same UTN-USERFirst-Hardware -- OU is <http://www.usertrust.com>.
That domain is owned by Comodo. Why is there not a Comodo root
certificate for this instead of a bunch of site certificate exceptions?

--

David E. Ross
<http://www.rossde.com/>.

Anyone who thinks government owns a monopoly on inefficient, obstructive
bureaucracy has obviously never worked for a large corporation.
© 1997 by David E. Ross

Eddy Nigg

unread,
Nov 25, 2011, 7:32:10 PM11/25/11
to mozilla-dev-s...@lists.mozilla.org
On 11/26/2011 02:15 AM, From David E. Ross:
> In Thunderbird 8.0 and SeaMonkey 2.5, I see 10 site certificates added
> as exceptions, all issued by The USERTRUST Network and tracing back to
> UTN-USERFirst-Hardware. Why was this done?

Those were the (infamous) certificates that were explicitly added and
distrusted upon request by Comodo.

--
Regards

Signer: Eddy Nigg, StartCom Ltd.
XMPP: star...@startcom.org
Blog: http://blog.startcom.org/
Twitter: http://twitter.com/eddy_nigg

David E. Ross

unread,
Nov 25, 2011, 10:30:03 PM11/25/11
to mozilla-dev-s...@lists.mozilla.org
On 11/25/11 4:32 PM, Eddy Nigg wrote:
> On 11/26/2011 02:15 AM, From David E. Ross:
>> In Thunderbird 8.0 and SeaMonkey 2.5, I see 10 site certificates added
>> as exceptions, all issued by The USERTRUST Network and tracing back to
>> UTN-USERFirst-Hardware. Why was this done?
>
> Those were the (infamous) certificates that were explicitly added and
> distrusted upon request by Comodo.
>

Aha! I looked at the certificate data but not at the trust.

Thanks.
0 new messages