作者Equalmusic (Cosmajoonitist)
看板MAC
标题[求救] Mail.app 的 Verify Certificate 警告
时间Wed May 4 21:40:45 2011
我在设定公司信箱的时候出现了警告
Mail can't verify the identity of "xxx.xxx.com".
The certificate for this server was signed by an unknown certifying
authority. You might be connecting to a server that is pretending to
be "xxx.xxx.com" which could put your confidential information at risk.
Would you like to connect to the server anyway?
想请板友帮忙解释一下这个 certificate 是怎麽运作的
比如 Mail.app 怎麽 verify servers
还有为什麽我想连上某个 server...却有可能连到某个伪装的 server？
要怎麽避免这种状况呢？感谢！
--
ｅ^(ｉπ) ＋ １ = ０
- Leonhard Euler
--
※ 发信站: 批踢踢实业坊(ptt.cc)
◆ From: 125.70.144.227
1F：→ LewisHamiltn:你们公司 ssl 凭证过期或自签的? 05/04 23:24
2F：→ pig:如果 ssl 凭证是自己签的话，这个讯息很正常 05/04 23:29
3F：→ Equalmusic:原来如此...所以有可能我会连上冒牌的 server？ 05/05 00:27
5F：→ pig:如果是自签的话，去把自己签的塞进keychain他就不会再吵你了 05/05 11:54
6F：→ pig:不然就请公司付钱去申请合格的凭证 05/05 11:54
7F：→ Equalmusic:那连结真有趣...看完有点懂又好像没懂...XDD 05/05 13:54
8F：→ Equalmusic:我之前都是勾 always trust...但是这样是不是不安全？ 05/05 13:55