Re: Fake Security Certificate

--Apple-Mail=_4E6F66DE-8645-43B1-8212-92205F3133F1
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii

Actually, the one you should ask, is your helpdesk or sysadmin.

Op 4 jul. 2014, om 08:15 heeft Muhammad Saqib <[email protected]> het =
volgende geschreven:

> Hello All
>=20
> I am in a little bit of fix relating to security of my office email
> and thought to seek advice of community here.
>=20
> I work in a small company and our office email is hosted on Google. A
> few days ago, I tried to change the password of my email and instead
> of opening the usual Google page for password change, it redirected me
> to passwordchange.mycompanydomain.com and my browser told me that the
> security certificate of this webpage cannot be trusted. nslookup
> passwordchange.mycompanydomain.com revealed that this webpage is
> indeed hosted by the server managed by our system administrator.
> Obviously, the password change link in the Google mail has been
> redirected to this webpage by our system administrator who is also
> responsible for managing and hosting of office email on Google and has
> the rights to edit such information.
>=20
> I would like to ask:
>=20
> 1. Is this something which I should ignore and continue with my email
> as earlier?
>=20
> 2. One possible reason for system administrator to do this could be
> enabling single sign on service for the users i.e. same password for
> email and the domain log on on office computers. By collecting the
> password from the email, the system admin can save the same password
> for domain log on. However, is this excuse good enough to allow for
> such practice?
>=20
> 3. Even if it is being used for single sign on, isn't there any way
> that an application using a trusted certificate can be used for this
> purpose?
>=20
> I would greatly appreciate your expert opinion on this.
>=20
>=20
> Regards
>=20
> =
------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an =
SSL certificate.  We look at how SSL works, how it benefits your company =
and how your customers can tell if a site is secure. You will find out =
how to test, purchase, install and use a thawte Digital Certificate on =
your Apache web server. Throughout, best practices for set-up are =
highlighted to help you ensure efficient ongoing management of your =
encryption keys and digital certificates.
>=20
> =
http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f7=
27d1
> =
------------------------------------------------------------------------
>=20


--Apple-Mail=_4E6F66DE-8645-43B1-8212-92205F3133F1
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIGdjCCBnIw
ggRaoAMCAQICAQUwDQYJKoZIhvcNAQEFBQAwgY8xCzAJBgNVBAYTAk5MMRAwDgYDVQQIDAdEcmVu
dGhlMQ0wCwYDVQQHDARFbGltMRAwDgYDVQQKDAdJbmVrcmlzMREwDwYDVQQLDAhTZWN1cml0eTET
MBEGA1UEAwwKSW5la3JpcyBDQTElMCMGCSqGSIb3DQEJARYWc2VjdXJpdHlAcGxhbmV0a2lwcy5u
bDAeFw0xNDA1MTIxMzU0MDhaFw0xNTA1MTIxMzU0MDhaMIGBMQswCQYDVQQGEwJOTDEQMA4GA1UE
CAwHRHJlbnRoZTEQMA4GA1UECgwHSW5la3JpczEWMBQGA1UECwwNQWRtaW5pc3RyYXRvcjEPMA0G
A1UEAwwGamFzcGVyMSUwIwYJKoZIhvcNAQkBFhZzZWN1cml0eUBwbGFuZXRraXBzLm5sMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxtxA+xNWGZs3vmcv5uRBq0gELNPjEOMcIgE2wRut
17HOnPyzOWDc++aWfO9hqqAmyOmAdt3zp3hZwcNXVGVMFm7esFsctcKhLziNCJo9412SEwMnWFx/
A7g8iLlIVjsO4+vaWorW2v8kosqAt+f+BEjUmSBsvlxgOqjRl4VbyhXnFP2tycY2ZwpLBN967EG+
KR5NzkdwbdZX40U/RlW+zdEQTf6NnPYAil72qrBUBkXWkzS1BzZ4fiAjsHcE120u9aw+mAkMdJQK
nwktVscUcFZPueeisRNEuRs29C6YPUz1NK8FKgwIp5RClGAeRjByVsMeYwsC0bbk2AyV2x6g0sjG
8Ckpkl+ErRH5cuzK01x7Jl274iwvWf8ZOJVP/4ZIRRUR+Yn1UpAjReBT4C/2VUtUPV8d+BQ6v9/S
xd0r2bG0b91r7F7p5lSfaacjkqh/vy2bteNUWrA9GTLKUHoOLAKyDzIQQznYyBKe5RAxYaV0h5hy
5561ieJSphM8EVKydPZ/wMvbljg9PZTsw/9BuDMWxkA5aGCEYFonCwqxuKjeCWfLFdXn15xxUlsu
aLHPeqjTn0CXilYfvE8MWjMG0BH2btIhXIfFsc4rU13ObnCg86JZpSqNRTcVkWHOkvIlM8d3tICn
NYCBzG0XZ5o8ew9eQZn/DryUUpGuoTzKRKcCAwEAAaOB5DCB4TAJBgNVHRMEAjAAMAsGA1UdDwQE
AwIF4DAsBglghkgBhvhCAQ0EHxYdT3BlblNTTCBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0O
BBYEFPk7Ccd2QV+hhzkdqAZewSIH/V4JMB8GA1UdIwQYMBaAFLzQj6H2p1nh6X1MFEb8wSHp3BOe
MFkGA1UdHwRSMFAwJqAkoCKGIGh0dHA6Ly9pbmVrcmlzLnhzNGFsbC5ubC9jcmwucGVtMCagJKAi
hiBodHRwOi8vaW5la3Jpcy54czRhbGwubmwvY3JsLmNybDANBgkqhkiG9w0BAQUFAAOCAgEAmVIb
kwyDUEbS2WajYKmipvsENq48v7/3rbt1M2nTj6YfI7a3No5K3ODBdpAI32mOow0MMu+U65lxVfq9
0+sMGfiuuuNajDf6wZVM62KzdPqPYlu2xzMrZpxOPm5GR6JRok9RTV5t5o5krMPtT/nF8jYFHrzf
bJLYg+loXSownUtd1fIAAeZZ3R/JncMoxpC2+IS7J/x4XlOq7SLvlS8TcNRZAzhZRrGcx/gqldsv
2uAagTAsZeURvD9fwr2cC4NGeuGLNvF7fS2DjzaTcFYIX3gT4w/mr5tuGr4f2TN56YKLJrbh4viE
s6EBnMtyAW/7CxnfwmAYT0Kegy28621gnysewpOeuUZQTyakqXGAyZPYQorsO1Vqbc0OfCc0wqSI
X6eO2PwCoYDt1GJu3vYBPJmjomp4ygg+HgLhVDpypd8Ui7Hm6mAiFRGT7vEllvdad4Fu1lZeq6y+
L5mZ8KMm26G5bq0ctEeO4RfQOXWrgY8VyiJpoj0D67m/Nk4sHpZRbRhKLhwi0zKZtYURgF7US+1v
kZNBkw/cKZDRs3rPX1xXu8plW58PSRx+0lPmbVQmBBUWcY7IePMblUst+BfRWY0ZD04aMGbjfahu
bwBihOgia2mto1dIUMRVUGBzru/N8CHBFlYofoviTAj9ibCEEFubXkJg00w1Fww2tiOn1qkxggRy
MIIEbgIBATCBlTCBjzELMAkGA1UEBhMCTkwxEDAOBgNVBAgMB0RyZW50aGUxDTALBgNVBAcMBEVs
aW0xEDAOBgNVBAoMB0luZWtyaXMxETAPBgNVBAsMCFNlY3VyaXR5MRMwEQYDVQQDDApJbmVrcmlz
IENBMSUwIwYJKoZIhvcNAQkBFhZzZWN1cml0eUBwbGFuZXRraXBzLm5sAgEFMAkGBSsOAwIaBQCg
ggGxMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTE0MDcwNDE3MjMz
NlowIwYJKoZIhvcNAQkEMRYEFJSjbEMwSKxeLqRlkMwvU/+ItbYVMIGmBgkrBgEEAYI3EAQxgZgw
gZUwgY8xCzAJBgNVBAYTAk5MMRAwDgYDVQQIDAdEcmVudGhlMQ0wCwYDVQQHDARFbGltMRAwDgYD
VQQKDAdJbmVrcmlzMREwDwYDVQQLDAhTZWN1cml0eTETMBEGA1UEAwwKSW5la3JpcyBDQTElMCMG
CSqGSIb3DQEJARYWc2VjdXJpdHlAcGxhbmV0a2lwcy5ubAIBBTCBqAYLKoZIhvcNAQkQAgsxgZig
gZUwgY8xCzAJBgNVBAYTAk5MMRAwDgYDVQQIDAdEcmVudGhlMQ0wCwYDVQQHDARFbGltMRAwDgYD
VQQKDAdJbmVrcmlzMREwDwYDVQQLDAhTZWN1cml0eTETMBEGA1UEAwwKSW5la3JpcyBDQTElMCMG
CSqGSIb3DQEJARYWc2VjdXJpdHlAcGxhbmV0a2lwcy5ubAIBBTANBgkqhkiG9w0BAQEFAASCAgB9
xxIKw73kr2eUElxV+F33y0gRXgpOzQOFXY4ZPDxTaKD9WgrJxXK+RHLmRmevpTo1/miEcrj2A8m2
eKgVUmuWnyZkv6vW1sqGBWcxVTEq5uHfWP4gDIAKhkYqeeE1b8xTnIdmGqwWeKXLTCCOnQFkkLVh
EIG/hni0fu4+J1DtOz23nt9Fu36OIZGuz8Bxg+TcMy0QDT53mmfdvI6A+phlWdgU1WABYwC/BpBt
aDTHZgYKVSHuUd8hzcep7bwvAUBNql4AWOaBSgQ9xXTYi0LXTFKCkNWLEFIDGMPiUzuxSpD0VFUe
Cz81Xu7keGEHon/r60hqA4YISlbUWRFygl5K3qe8Qje/Pl2+RK22mUi64sxjivSS5LrGdQDxAysA
NH+2P6ZfkH2CHW0c89qiFC0A+/yede5uOPtzuXztv9oeo8gzu/1AqyJJR52ObDfiUTHUGb3Qv5Sf
+QOWaO/yCrPuyZF9pUWkm8E5V+CWi0yaDzErXh6CSGVbrq3OPBSThT2FbsRJykGi1lEbJljRng3Y
/lrj+oH8npRMcNcfmHpNHIzCOyWNyVOH9Zmbbg0x4zn5apH0nRfhFjzGCDB1HASqiVSFY8B7RVPi
bwPPO+IjcukrWtCjtgudYw0e2RG0rtvAg3v5FT4bq1tvY8jUKLk13SCrDk3C3BH/I94F+jLYpAAA
AAAAAA==

--Apple-Mail=_4E6F66DE-8645-43B1-8212-92205F3133F1--