Slashdot Mirror
Apple Updates Safari for Improved SSL Authentication
An anonymous reader writes "Safari upate is available from Apple on Software Update. This updates to Safari 1.0 Beta 2 (v74)." Says Apple, "This update is recommended for all Safari users and improves how Safari validates the authenticity of websites that use SSL certificates."
There's nothing like seeing "2 minutes remaining" turning into "20 minutes remaining" that brings a smile to my face.
Etiquette is etiquette. He kills his mother but he can't wear grey trousers.
Microsoft seems to twiddle their thumbs when security issues are found. Apple has been pretty good with security issues, even in their beta software like Safari.
Nice to know they fix stuff very fast when it occurs. This was only announced a couple of days ago.
Microsoft is a whole lot slower to release stuff even when they are caught with their pants down which is usually what happens.
Check the creation date on the updated app. It was built a couple of days ago.
I'm guessing they just had to run it thru QA since then to make sure they didn't break something else by fixing this.
"The worst tyrannies were the ones where a governance required its own logic on every embedded node." - Vernor Vinge
Come on - it was a joke. The real reason is to pad out the distance between dupes and M$ bashing articles.
=tkk
Bill Gates - Creationist?!?
Actually for the fraction of users who load apple.slashdot.org this is "stuff that matters". It's a section meant to be read by Mac users (read: potential Safari users)...see ?
Don't forget to think different.
One May 9, Secunia released an advisory entitled Apple Safari and Konqueror Embedded Common Name Verification Vulnerability. The summary is, "Apple Safari and Konqueror Embedded fails to validate the Common Name of a SSL certificate. This makes it possible to spoof SSL sites, so that users can't trust the authenticity of a SSL website." They also add, "NOTE: This does not affect the ordinary version of Konqueror."
And would you like to tell me what percent of computer users use Linux?
Karma: Ran over your dogma.
That's okay. It's still pretty trivial, unworthy-of-Slashdot news.
May we never see th
I've had . in my path for many years, and wouldn't do without it. It's at the end of my path, so there's no way you're going to spoof my "cat". It's only those who have . at the beginning of their path that get screwed.
Oh, you've never accidentally run a chomd, or maybe l s-l?
(Ouch, those hurt to type.)
Mark
...from using the term authentification.
--- We are not in the 8th dimension. We are over New Jersey.
And I'm glad that the ssl fix came in. But does anyone know if that nasty memory leak is fixed too?
a thought - by computer users do you also include computers that use computers, or do you only mean people who use computers?
I used to have a better sig than this, but I got tired of it
At home I do NOT have high-speed access, just dial-up over crappy 80 year-old lines (parts of the path from wall jack to telco interface are the original wires from when the building was first wired).
I prefer NOT automatically loading images, instead individually selecting the ones I actually need to see, or in the extreme case, selecting the menu choice (or clicking the 'load images' button) to load the whole page.
As much as I'd like to say 'buh-bye' to Internet Exploiter I simply can't, at least not at home.
Perhaps there's something I'm missing, and I don't have to burrow through and change preferences in Safari each time I want to do this?
Oh, and I guess that the security fixes are also a good thing.
Theory and practice are the same in theory, but different in practice.
In the appearance pane in prefrences uncheck "Display images when the page opens".
Volia, images will not loaded automatically, as you prefer. This has been there since before beta2 iirc.
I can't see how you're supposed to load them manually though...
"The worst tyrannies were the ones where a governance required its own logic on every embedded node." - Vernor Vinge
The user notes that he knows about that preference of not loading images.
What is missing in Safari is the ability to manually load individual images when you have images set to not load.
Apparenlty MSIE has this feature, I know iCab has it (along with a lot of other's I'd like to see in Safari).
When images aren't loaded, you can right-click (cmd-click) on the image placeholder and choose something like "load image", and only that image will be loaded. In iCab this is especially useful, as sometimes your image filtering rules cause a useful image to not load. That's the price I pay for not being forced to load all those damned flashy GIFs and springy FLASH animations though.
I'm sure this will make it in to Safari at some point, perhaps the initial non-beta release. While we're at it, I'd like a way to disable the "You seem to be looking for something" dialog when you click the "back" button more than few times. So many of the site's don't change their page titles, and going back one-by-one is the only way to locate the content again without page previews.
Article X: The powers not delegated... by the Constitution...are reserved...to the people
Does any body know a solution howto use https via squid proxy (beta2/v74)? This is the only reason to sometimes use Explorer on my macs here ...
As much as I'd like to say 'buh-bye' to Internet Exploiter I simply can't, at least not at home.
Um, Safari is hardly the only non-MSIE browser available for Mac OS X. Try Camino, or Mozilla, or OmniWeb, or iCab.
$x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
$x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;