[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [OT] SSL certificates and daylight savings



On Mon, 2002-10-28 at 04:47, Rebecca Dridan wrote:
> On Mon, Oct 28, 2002 at 10:31:23AM +0100, martin f krafft wrote:
> > also sprach Rebecca Dridan <rdrid@ormond.unimelb.edu.au> [2002.10.28.1004 +0100]:
> > > Does anybody know if a switch to daylight savings could cause a problem
> > > with a site's certificate at all, let alone one with that error?
> > 
> > I would assume this to be the bank's fault. SSL and certificates are
> > not affected by daylight savings time as they operate with UTC time
> > inside. UTC knows none of that daylight savings crap.
> > 
> The bank's fault, yes, but what circumstances on the banks server
> (related to daylight savings) would give a "I don't recognise this
> issuer" error?
> 
> bec

Honestly, I would suspect that somebody is using the time or timezone
along with the SSL certificate in creating a secure cookie for the
session, and due to the confusion between Rebecca's *correct* timezone
and clock, and the banK's incorrect timezone, the cookie isn't clearing
on both ends.
-- 
Mark L. Kahnt, FLMI/M, ALHC, HIA, AIAA, ACS, MHP
ML Kahnt New Markets Consulting
Tel: (613) 531-8684 / (613) 539-0935
Email: kahnt@hosehead.dyndns.org

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: