作者Equalmusic (Cosmajoonitist)
看板MAC
標題[求救] Mail.app 的 Verify Certificate 警告
時間Wed May 4 21:40:45 2011
我在設定公司信箱的時候出現了警告
Mail can't verify the identity of "xxx.xxx.com".
The certificate for this server was signed by an unknown certifying
authority. You might be connecting to a server that is pretending to
be "xxx.xxx.com" which could put your confidential information at risk.
Would you like to connect to the server anyway?
想請板友幫忙解釋一下這個 certificate 是怎麼運作的
比如 Mail.app 怎麼 verify servers
還有為什麼我想連上某個 server...卻有可能連到某個偽裝的 server？
要怎麼避免這種狀況呢？感謝！
--
ｅ^(ｉπ) ＋ １ = ０
- Leonhard Euler
--
※ 發信站: 批踢踢實業坊(ptt.cc)
◆ From: 125.70.144.227
1F：→ LewisHamiltn:你們公司 ssl 憑證過期或自簽的? 05/04 23:24
2F：→ pig:如果 ssl 憑證是自己簽的話，這個訊息很正常 05/04 23:29
3F：→ Equalmusic:原來如此...所以有可能我會連上冒牌的 server？ 05/05 00:27
5F：→ pig:如果是自簽的話，去把自己簽的塞進keychain他就不會再吵你了 05/05 11:54
6F：→ pig:不然就請公司付錢去申請合格的憑證 05/05 11:54
7F：→ Equalmusic:那連結真有趣...看完有點懂又好像沒懂...XDD 05/05 13:54
8F：→ Equalmusic:我之前都是勾 always trust...但是這樣是不是不安全？ 05/05 13:55