On Fri, Jul 20, 2001 at 02:36:11PM +1200, Matt Camp wrote: Not NZ, but windowsupdate.microsoft.com was giving the hax0red message briefly an hour or so ago... then it looks like they pulled those machines out of the cluster. Pretty special really. Failling to patch the machines which dish out the patch, is all class. Actually, even though this isn't really an example hierarchal trust models, it certainly demonstrates the weaknesses of such models. Assume, for example, that windowsupdate.microsoft.com was a secure site (or had a secure section in it) that was responsible for delegating certificates of some kind of other authorization token to services further down the chain. Crunch. The top of the hierarchy getting hosed is very evil. This is one of my nits about Verisign, even though they have fragmented things a little, they are still more or less a single-point of authority out there for millions of web-sites. Still, DNS is not better if not worse :) --cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog