[liberationtech] "AnchorFree may install its own certificate as a Trusted Publisher."

[KheOps]

On 04/10/2012 12:52 AM, Robert Guerra wrote:
> If they are installing their own trusted CA cert, well, it might mean using their service you will have no ability to conduct a safe ssl connection.

The way it is said on the HotSpot Shield website is not 100% clear to me
: does "Trusted Publisher" actually refer to CA ?

> 
> If they are using the trusted cert for some other reason, then they should be far - more transparent - as to what they will be doing and if they will be compliant with privacy laws in canada and/or the eu.

Indeed, and this news is not so good, notably for Syrian people, as some
of them use HotSpot Shield VPN services.

> 
> Regards
> 
> Robert
> Sent from a mobile device. Appologies for typos or brevity.
> 
> -----Original Message-----
> From: Frank Corrigan <email at franciscorrigan.com>
> Sender: liberationtech-bounces at lists.stanford.edu
> Date: Mon, 09 Apr 2012 23:39:36 
> To: <liberationtech at mailman.stanford.edu>
> Subject: [liberationtech] "AnchorFree may install its own certificate as a
> 	Trusted Publisher."
> 
> Anyone know the SSL / TLS and general security implications of this new
> 'terms' addition to HotSpotShield:
> 
> "7.3 Trusted Publisher. As part of the Service, AnchorFree may install
> its
> own certificate as a Trusted Publisher. AnchorFree reserves the right to
> make future installs or updates at anytime without any notice for its
> convenience."
> http://www.hotspotshield.com/terms/
> 
> Thanks
> Frank
> 
> _______________________________________________
> liberationtech mailing list
> liberationtech at lists.stanford.edu
> 
> Should you need to change your subscription options, please go to:
> 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
> If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?"
> 
> You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
> Should you need immediate assistance, please contact the list moderator.
> 
> Please don't forget to follow us on http://twitter.com/#!/Liberationtech
> _______________________________________________
> liberationtech mailing list
> liberationtech at lists.stanford.edu
> 
> Should you need to change your subscription options, please go to:
> 
> https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
> If you would like to receive a daily digest, click "yes" (once you click above) next to "would you like to receive list mail batched in a daily digest?"
> 
> You will need the user name and password you receive from the list moderator in monthly reminders. You may ask for a reminder here: https://mailman.stanford.edu/mailman/listinfo/liberationtech
> 
> Should you need immediate assistance, please contact the list moderator.
> 
> Please don't forget to follow us on http://twitter.com/#!/Liberationtech

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 554 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20120410/2dc08d21/attachment.asc>