A while back, I wrote in passing that I wouldbe especially nervous if I ran across a rootkit that specificallytargeted Red Hat Enterprise systems (for example, to the extent ofcorrupting the RPM database checksums ). TodayI feel like elaborating on that.

(Right off the bat I'll say that it's not because we use RHEL here.Our use of RHEL is small and so far none of it is in machines thatare particularly exposed to users or the world.)

What would make me

Here is a modest suggestion from the devil's advocate: web browsersshould forbid self-signed SSL certificate entirely, with no 'no,really, let me through' button, option, or extended dialog . They should do this because in practice and ingeneral there is no way to make self-signed SSL certificates at allsecure.

Self-signed certificates are insecure in general unless you reallytruly know what you are doing. Most users do not know what they aredoing in this sense, and for