[liberationtech] Quick Guide: Revoking Trust and Mitigating Fallout from DigiNotar [Persian]

[Ivan Boothe]

I don't read Persian, but from the translation and the links provided, it looks like it talks about Microsoft removing the certificate from their trusted list. That fixes it for IE on Windows Vista and 7, but not for Windows XP and 2003 (Server). Instructions for that are here:

http://www.groovypost.com/howto/security-alert-diginotar-issues-fraudulent-google-com-certificateinstructions-for-how-to-protect-yourself/

Also, in case anyone uses Opera, they've confirmed that they removed it from their centralized list:
http://my.opera.com/securitygroup/blog/2011/08/30/when-certificate-authorities-are-hacked-2


I posted my own real-quick roundup to the MayFirst issue queue, if anyone else wants links to all the browser/OS how-tos:
https://support.mayfirst.org/ticket/4589

--ivan



-- 
Rootwork: Powering grassroots
networks from the bottom up

ivan at rootwork.org
http://www.rootwork.org
phone: 202.730.9465

Twitter: http://twitter.com/rootwork
Facebook: http://facebook.com/rootwork
Google Plus: http://gplus.to/ivanb



On Aug 30, 2011, at 11:22 PM, Collin Anderson wrote:

> All - 
> 
> In response to the compromise of the DigiNotar, I was asked to compile a short notice for Iranians to respond to reports of illegitimate certificates being offered to Google users by a number of ISPs. This was then translated by a non-technical Iranian colleague. I am grateful for the input I've received from a number of people, and the translation work prepared by unnameable individuals. A PDF was also compiled in light of how information is generally circulated in some circles.
> 
> If there is any advice of additional precautions, I would certainly appreciate it.
> 
> http://b.averysmallbird.com/entries/%D8%B1%D9%88%D8%B4%D9%87%D8%A7%DB%8C-%D8%B3%D8%A7%D8%AF%D9%87
> 
> Cordially,
> -- 
> Collin David Anderson
> averysmallbird.com | @cda | Washington, D.C.
> 
> _______________________________________________
> liberationtech mailing list
> liberationtech at lists.stanford.edu
> 
> Should you need to change your subscription options, please go to:
> 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
> If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?"
> 
> You will need the user name and password you receive from the list moderator in monthly reminders.
> 
> Should you need immediate assistance, please contact the list moderator.
> 
> Please don't forget to follow us on http://twitter.com/#!/Liberationtech

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20110831/dc51a458/attachment.html>