Re: DCM cert for Apache settings

Nope...that's email spoofing...

With DNS spoofing you type mybank.com into you browser...

Unbeknownst to you, somewhere in the DNS chain you're using, abc.com got
pointed to aaa.bbb.ccc.ddd instead of the actual IP used by the true
mybank.com servers. (Alternatively, some rogue software on your PC
modified your hosts file)

So you think you're on mybank.com, but in reality, you're on a fake site.

With HTTP, you'll see mybank.com in the address bar.

With HTTPS, you'd get a big flag saying the domain doesn't match the cert,
or that the cert wasn't issued by a trusted authority.

While there have been cases of fraudulent certs being issued, it's been
locked down pretty tight. Especially for "big name" companies. In
addition, fraudulently issued certs can be revoked.

Charles

On Wed, Mar 8, 2017 at 1:20 PM, Nathan Andelin <nandelin@xxxxxxxxx> wrote:

nope...ever heard of DNS spoofing aka DNS poisoning...

Yes, you get an email from someone claiming to be your bank, where an
embedded link points to fraudsters.inc, who happens to use a certificate
issued by GoDaddy?
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: http://amzn.to/2dEadiD