General :  K-Meleon Web Browser Forum
General discussion about K-Meleon 
IDN Mozilla bug and K-meleon
Posted by: Misiek
Date: February 09, 2005 11:26AM

I've discovered that K-meleon 0.9b installation, based od Wechselbalg compilation is not vulnerable. Look
http://www.shmoo.com/idn/
On Firefox - address bar says http://www.paypal.com and security check displays correct certificate, but Firefox displays wrong website.

Firefox 1.0 and also Mozilla _IS_ vulnerable, K-meleon is NOT, because it shows https://www.pĐ°ypal.com/ on address bar
and displays icon that suggests nonsecure connection.
Here is more information on this bug:
http://users.tns.net/~skingery/weblog/2005/02/permanent-fix-for-shmoo-group-exploit.html
Yours
Marcin

Options: ReplyQuote
Re: IDN Mozilla bug and K-meleon
Posted by: guenter
Date: February 09, 2005 11:49AM

none of the differnt k-m brews seem affected:
http://kmeleonbrowser.org/forum/read.php?f=1&i=22781&t=22781
kind regards

Options: ReplyQuote
Re: IDN Mozilla bug and K-meleon
Posted by: Midas
Date: February 09, 2005 12:39PM

K-meleon 0.9b installation, based od Wechselbalg compilation

What package is this? Is there a download address? Thanks...

Options: ReplyQuote
Re: IDN Mozilla bug and K-meleon
Posted by: guenter
Date: February 09, 2005 12:42PM

@Misiek
ak-47 (---.gdynia.mm.pl) seeks to translate or possibly a translation.
http://kmeleonbrowser.org/forum/read.php?f=2&i=3858&t=3858
maybe post him links too?

Options: ReplyQuote


K-Meleon forum is powered by Phorum.