Mozilla has released Firefox 6.0.2 to remove additional DigiNotar-issued SSL certificates. According to a Mozilla blog post, DigiNotar, the Dutch certificate authority that was used by an Iranian hacker to issue fraudulent SSL certificates, also issued some certificates used by the Dutch government. The Dutch government’s initial assessment indicated that those certificates were still trustworthy, so Mozilla exempted them from Firefox 6.0.1’s removal of DigiNotar root certificates. After an audit of DigiNotar, the Dutch government rescinded that initial assessment of trust, so Mozilla has now removed all DigiNotar certificates from Firefox. Google has updated Chrome (which happens automatically), and Apple has now released Security Update 2011-005 to protect Safari users (it’s also possible to excise the DigiNotar certificates from your base keychain if you’re not yet in a position to apply Apple’s update). Firefox users should update to 6.0.2 to avoid the real-world exploits based on these fraudulent certificates. (Free, 28.1 MB, release notes)
Sync Safari Bookmarks to Your iPhone
Tired of typing URLs into Mobile Safari on your iPhone or iPod touch? Use the bookmarks you already have in Safari on your Mac.
Next time you do an iTunes sync, select your iPhone or iPod touch in the Devices section of the iTunes sidebar. Scroll down to the Web Browser section of the Info tab on the right-hand side of the iTunes window and select Sync Safari Bookmarks.
After your next sync the bookmarks will be available in Mobile Safari on your iPhone or iPod touch.