Slashdot Mirror

← Back to Stories (view on slashdot.org)

Mozilla Says It Erred On SSL Attack Disclosure

Posted by Soulskill on from the comodo-draggin-their-feet dept.

Trailrunner7 writes "Just days after news emerged of the attack on a registration authority in Europe tied to Comodo that caused the revocation of a number of fraudulent certificates from the major browsers, Mozilla officials have admitted they made a mistake by not disclosing the details of the incident to its users earlier. 'In hindsight, while it was made in good faith, this was the wrong decision. We should have informed web users more quickly about the threat and the potential mitigations as well as their side-effects.'"

3 of 62 comments (clear)

  1. Re:No harm, no foul by Anonymous Coward · · Score: 3, Insightful

    Yeah except if the situation had been reversed and Microsoft had done what Mozilla did. Then there would be pitchforks about how Microsoft was being evil. But, no, this time it was Mozilla and they can just do no wrong.

  2. Good on them by BlueParrot · · Score: 4, Insightful

    Admitting it was a mistake rather than coming up with some bogus excuse gives them points in my book. Whether the decision was by marketing or just company policy it at least suggests they have one or two competent people over there.

  3. I think they did the right thing - BOTH times by darthcamaro · · Score: 3, Insightful

    Mozilla was the first browser vendor to patch. SURE they could have told us exactly what they were patching, but they erred on the side of caution. The fact that they want to be OPEN about everything is just a bonus and it's what differentiates Mozilla from every other browser vendor.