[cryptography] Newbie Question

Steven Bellovin smb at cs.columbia.edu
Fri Dec 2 08:45:27 EST 2011


On Dec 1, 2011, at 11:43 36PM, Randall Webmail wrote:

> From: "ianG" <iang at iang.org>
> 
> >It does store certs.  It just takes above & beyond to get at them.  
> Unknown whether it stores certs that you reject.
> 
> I spend a lot of time in hotels, and it is VERY common for me to get one of those popups complaining about certificates when I connect to the hotel WiFi.
> 
> I am an almost-complete greenie WRT crypto, which is why I'm here to learn.
> 
> What is the proper thing to do when one of those things pops up?   (It is NOT a rare event).
> 
> I use the "https everywhere" firefox extension on my OSX laptop.   I do not access my bank accounts on public WiFi, but I really don't have a choice but to access webmail and gmail.    What should I do when I get one of those cert warnings?

Most often, that pops up on initial connection, when you have to go through
the hotel's "intercept the web and make the user agree to something" page.

Personally, I use a different browser to get online, then set up a VPN or
ssh tunnel to a proxy server for my real browsing.


		--Steve Bellovin, https://www.cs.columbia.edu/~smb








More information about the cryptography mailing list