|
|
Message Digest
Volume 28 : Issue 292 : "text" Format
Messages in this Issue:
Re: Security warning on Verizon server
Re: Security warning on Verizon server
Re: Security warning on Verizon server
Re: Security warning on Verizon server
Re: New Internationalized domain names are coming
====== 28 years of TELECOM Digest -- Founded August 21, 1981 ======
Telecom and VOIP (Voice over Internet Protocol) Digest for the
Internet. All contents here are copyrighted by Patrick Townson and
the individual writers/correspondents. Articles may be used in other
journals or newsgroups, provided the writer's name and the Digest are
included in the fair use quote. By using -any name or email address-
included herein for -any- reason other than responding to an article
herein, you agree to pay a hundred dollars to the recipients of the
email.
===========================
Addresses herein are not to be added to any mailing list, nor to be
sold or given away without explicit written consent. Chain letters,
viruses, porn, spam, and miscellaneous junk are definitely unwelcome.
We must fight spam for the same reason we fight crime: not because we
are naive enough to believe that we will ever stamp it out, but because
we do not want the kind of world that results when no one stands
against crime. Geoffrey Welsh
===========================
See the bottom of this issue for subscription and archive details
and the name of our lawyer, and other stuff of interest.
Date: 23 Oct 2009 16:13:49 -0000
From: John Levine <johnl@iecc.com>
To: redacted@invalid.telecom.csail.mit.edu
Subject: Re: Security warning on Verizon server
Message-ID: <20091023161349.79983.qmail@simone.iecc.com>
In article <20091023023407.GA24599@telecom.csail.mit.edu> you write:
>I just tried to access https://www.verizon.com/ . I got an error message, saying that
>"The certificate is only valid for a248.e.akamai.net". Anyone else have this result?
It's just a configuration error. Akamai is a giant content delivery
network that lots of big web sites use to host the static parts of
their content. There's nothing at all odd about Verizon's home page
being hosted at Akamai.
R's,
John
***** Moderator's Note *****
I understand Akamai's role, but it seems odd that Verizon would allow
such an error to happen while it tries to position itself as a data
delivery company.
Bill Horne
Moderator
Date: Fri, 23 Oct 2009 22:24:58 -0400
From: tlvp <mPiOsUcB.EtLlLvEp@att.net>
To: redacted@invalid.telecom.csail.mit.edu
Subject: Re: Security warning on Verizon server
Message-ID: <op.u198zwfto63xbg@acer250.gateway.2wire.net>
On Fri, 23 Oct 2009 12:13:49 -0400, John Levine <johnl@iecc.com> wrote:
> In article <20091023023407.GA24599@telecom.csail.mit.edu> you write:
>> I just tried to access https://www.verizon.com/ . I got an error
>> message, saying that "The certificate is only valid for
>> a248.e.akamai.net". Anyone else have this result?
>
> It's just a configuration error. ...
>
>--- [snip] ---
>
> ***** Moderator's Note *****
>
> I understand Akamai's role, but it seems odd that Verizon would
> allow such an error to happen while it tries to position itself as a
> data delivery company.
I guess VZ Brand Identity and VZ Tech only rarely compare notes ... .
Cheers, -- tlvp
--
Avant de repondre, jeter la poubelle, SVP
Date: Fri, 23 Oct 2009 10:48:39 -0700
From: Steven <diespammers@killspammers.com>
To: redacted@invalid.telecom.csail.mit.edu
Subject: Re: Security warning on Verizon server
Message-ID: <hbsq9p$15l$1@news.eternal-september.org>
Telecom digest moderator wrote:
> I just tried to access https://www.verizon.com/ . I got an error
> message, saying that "The certificate is only valid for
> a248.e.akamai.net". Anyone else have this result?
I get the same, just click OK and it connects. Must be some kind of
link. Try www.verizon.net, the following link you used just forwards
to the net address: https://www.verizon.com.
--
The only good spammer is a dead one!! Have you hunted one down today?
(c) 2009 I Kill Spammers, Inc., A Rot in Hell. Co.
Date: Sat, 24 Oct 2009 16:39:48 +1100
From: David Clayton <dcstar@NOSPAM.myrealbox.com>
To: redacted@invalid.telecom.csail.mit.edu
Subject: Re: Security warning on Verizon server
Message-ID: <pan.2009.10.24.05.39.45.492429@NOSPAM.myrealbox.com>
On Fri, 23 Oct 2009 10:48:39 -0700, Steven wrote:
> Telecom digest moderator wrote:
>
>> I just tried to access https://www.verizon.com/ . I got an error
>> message, saying that "The certificate is only valid for
>> a248.e.akamai.net". Anyone else have this result?
>
> I get the same, just click OK and it connects. Must be some kind of link.
> Try www.verizon.net, the following link you used just forwards to the net
> address: https://www.verizon.com.
When you get a certificate for a SSL web server the domain name in the
cert must match the domain of the site you are going to, else you get
that mismatch error message.
There is probably a "master" web server for the Verizon domain that load
shares the incoming requests by redirecting to other web sites that do the
actual work, and someone probably has made some changes and forgot to set
up the correct cert for that initial site.
In general you should never ignore that sort of error, as it may
indicate a hijacked web site just waiting to steal your banking details
etc.
--
Regards, David.
David Clayton
Melbourne, Victoria, Australia.
Knowledge is a measure of how many answers you have, intelligence is a
measure of how many questions you have.
Date: Fri, 23 Oct 2009 18:16:13 -0400
From: Bill Horne <bill@horneQRM.net>
To: redacted@invalid.telecom.csail.mit.edu
Subject: Re: New Internationalized domain names are coming
Message-ID: <4AE22B2D.9020801@speakeasy.net>
I asked for more info on the new top-level domains from another group:
here's a reply from Dan Ritter of the Boston Linux & Unix User Group:
> The worst problems are going to be variants of this:
> http://www.schneier.com/blog/archives/2005/02/unicode_url_hac_1.html
> And this is a good slideshow (PDF, 118 slides)
> http://www.casabasecurity.com/files/Chris_Weber_Character%20Transformations%20v1.7_IUC33.pdf
The slideshow and Bruce Schneier's blog give a very good introduction
of the pitfalls that may lie ahead. My thanks to Mr. Ritter for his
help.
Bill Horne
Moderator
--
E. William Horne
William Warren Consulting
Computer & Network Installations, Security, and Service
http://william-warren.com
781-784-7287
(Filter QRM for direct replies)
TELECOM Digest is an electronic journal devoted mostly to telecom-
munications topics. It is circulated anywhere there is email, in
addition to Usenet, where it appears as the moderated newsgroup
'comp.dcom.telecom'.
TELECOM Digest is a not-for-profit, mostly non-commercial educational
service offered to the Internet by Bill Horne. All the contents
of the Digest are compilation-copyrighted. You may reprint articles in
some other media on an occasional basis, but please attribute my work
and that of the original author.
The Telecom Digest is moderated by Bill Horne.
Contact information: Bill Horne
Telecom Digest
43 Deerfield Road
Sharon MA 02067-2301
781-784-7287
bill at horne dot net
Subscribe: telecom-request@telecom-digest.org?body=subscribe telecom
Unsubscribe: telecom-request@telecom-digest.org?body=unsubscribe telecom
This Digest is the oldest continuing e-journal about telecomm-
unications on the Internet, having been founded in August, 1981 and
published continuously since then. Our archives are available for
your review/research. We believe we are the oldest e-zine/mailing list
on the internet in any category!
URL information: http://telecom-digest.org
Copyright (C) 2009 TELECOM Digest. All rights reserved.
Our attorney is Bill Levant, of Blue Bell, PA.
---------------------------------------------------------------
Finally, the Digest is funded by gifts from generous readers such as
yourself who provide funding in amounts deemed appropriate. Your help
is important and appreciated. A suggested donation of fifty dollars
per year per reader is considered appropriate. See our address above.
Please make at least a single donation to cover the cost of processing
your name to the mailing list.
All opinions expressed herein are deemed to be those of the
author. Any organizations listed are for identification purposes only
and messages should not be considered any official expression by the
organization.
End of The Telecom digest (5 messages)
|
or 