[iwhd patch 1/2] Support registration in RHEV-M 2.2

Pete Zaitcev zaitcev at redhat.com
Thu May 12 16:05:04 UTC 2011


On Thu, 12 May 2011 10:04:05 -0400
Jeff Darcy <jdarcy at redhat.com> wrote:

> On 05/11/2011 09:06 PM, Pete Zaitcev wrote:

> >  - Make sure that we transmit data over SSL (albeit in an insecure way).
> 
> Since I'm dealing with SSL stuff in CloudFS, I'm curious.  What kind of
> security gaps are you referring to here?

I do not check the certificate, so MITM is possible, even though I, being
an employee of Red Hat, could coordinate the delivery of root certificates
with RHEV-M people, so we don't even need to pay to CA to make this work.
I am just lazy and hurried.

-- Pete


More information about the iwhd-devel mailing list