[Full-disclosure] Certificate spoofing issue with Mozilla, Konqueror, Safari 2

Moin Mozilla based browsers Firefox, Netscape, ..., Konqueror and Safari 2 do not bind a user-approved webserver certificate to the originating domain name. This makes the user vulnerable to certificate spoofing by "subjectAltName:dNSName" extensions. I set up a demonstration at...