The Main Problem seems to be: metalab.at:443 uses an invalid security certificate. The certificate is not trusted because the issuer certificate is unknown. The certificate expired on 20.04.2009 20:03. (Error code: sec_error_unknown_issuer) But if anyone should generate/request a new certificate please use SHA-1 greets MiKa PS: the DNS option doesn't weaken or strengthen the security of certificates it's only about how to verify the root certificate (fingerprint). DNS is one of the registered and standardized "operational protocols" of PKI and as secure or insecure as any of the others. That's the idea of PKI: don't rely on underlying transport mechanisms but get the verification of root certificates right. Benedikt Gollatz wrote:

Da ich keine Ahnung habe, wer das fixen kann, hierher:

Die wunderbare Firefox-Extension "SSL Blacklist" (warnt vor schwachen Debian- OpenSSL-Keys und mit MD5 signierten Zertifikaten) [1], beschwert sich f�r https://metalab.at/ �ber einen ebensolchen Debian-Key.

Vielleicht mag sich jemand drum k�mmern.

Benedikt

[1] Ich wei�, verwendet DNS, bringt keine wirkliche Sicherheit...

_______________________________________________ Metalab mailing list Metalab@lists.metalab.at http://lists.metalab.at/mailman/listinfo/metalab