Post
Topic
Board Service Discussion
Re: html source of mtgox.com
by
HumanFractal
on 25/02/2014, 11:25:28 UTC
Oh, I see - the loading screen. Yeah, I got that, too - didn't even think about it. At first, I thought it might be me, so I checked with a VM machine using Firefox instead of Chrome "with some urgency." Cheesy Heh, sorry about the scare. Embarrassed

DNS attack shouldn't be able to adequately forge SSL certificate in most reasonable scenarios (though it's happened outside cert keys just being stolen/compromised - google comodo attack, allegedly done by a single guy). DNS attacker who was really specific (targeting crypto users, maybe) would probably just self-sign certificates for fake crypto websites and hope you click through the browser warnings (so to answer your question - no - or at least "no, I don't think so."). Idunno SSL cert mechanics well enough to fully answer you, though.

Yeah, I'm fairly certain they would need the keys to forge data... Unless you run Safari or iOS Wink
http://www.macworld.com/article/2099987/what-you-need-to-know-about-apples-ssl-bug.html

Though I wouldn't completely write off the possibility that Gox had their keys stolen- at least this panic has a happy ending not requiring me to reinstall any of my machines yet again.