Re: [tlug] Microsoft vs. Firefox

[Edward Middleton <edward.middleton@example.com>]

On 06/24/2010 08:02 AM, Darren Cook wrote:
>>> Okay, slightly off-topic: I'm trying to register Visual C++, but Firefox
>>> tells me https://profile.microsoft.com is untrusted.
>>>
>>> Now, it turns out Microsoft's certificate is self-signed. ...
> 
> The problem is with Firefox (in fact all browsers except IE) not
> supporting an optional RFC, and Microsoft have chosen this way to
> distribute their CA certificates. Good explanation here:
>   http://isc.sans.edu/diary.html?storyid=1230

That standard practice is to bundle intermediate CA certificates with
the root CA certificate which avoids this problem. IIS supports this ;)

Edward