blob: 62b8e9ca7ebc3a67c9b5267f562cf9f0e802f3df (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
List of known security holes in KDE's SSL implementation and HTTPS support in
Konqueror.
-----------------------------------------------------------------------------
1) Caching should be done on a per-host basis, not per-certificate.
2) Autocompletion in form fields in HTTPS mode will result in various fields
such as pin numbers and possibly credit cards or other sensitive information
being silently written to disk in some cases.
3) Certificate revocation lists (CRLs) are not implemented. This should be
done after 2.2.
|
