More of my sites

WinInfo Daily News
SuperSite for Windows
Windows IT Pro Magazine
Connected Home
Thurrott Dot Com
Windows Weekly at TWIT

About this site

For six years, the Internet Nexus served as my technology blog, but I've since started blogging at the SuperSite Blog instead. If you're looking for the blog, please head there. --Paul

Wednesday, July 28, 2004

Mozilla to squash security bugs

ZDNet: "Web surfers eyeing Mozilla-based browsers as a safer alternative might want to wait a week before making the switch. That's because the Mozilla Foundation, an open-source browser development group in Mountain View, Calif., has acknowledged a pair of serious flaws in the way its browsers handle certificates, the digital documents that let you verify a Web site's identity. Mozilla said its engineers were caught off-guard by the vulnerabilities, as the code in question dates back from the open-source browser's proprietary progenitor, Netscape. 'The security code has been around for six or seven years, so all the serious bugs got worked out in the Netscape 4.0 time frame,' said Chris Hofmann, the Mozilla Foundation's director of engineering. 'We haven't seen anything serious in quite some time, so this is a surprise.' The certificate-handling flaws come at an awkward time for the Mozilla Foundation, just as security experts are promoting its browsers, along with Opera and others, as safer alternatives to Microsoft's dominant Internet Explorer software."

Guys, wake up. Mozilla is still a lot more secure than IE. Duh.

[ Posted at 1:39 PM | Permalink ]