krs

Not Mac specific but it could definitely affect Mac users:

Hack Obtains 9 Bogus Certificates for Prominent Websites; Traced to Iran | Threat Level | Wired.com

CanadaRAM

The article states that Comodo revoked the certificates "within hours"
Which presumably means that this particular hack should affect nobody now, but may theoretically have during the period it was undetected.

krs

True enough -

What bothers me is that Comodo was unaware of the problem and only found out when another agency pointed it out to them.
I suppose there is no 100% security against hackers but one would hope that a site like Comodo should have at least a means to detect when it had been compromised.

Atroz

Actually, you need to make sure that your browser actually checks for revoked certificates. If not, your browser will still be tricked.

See here for Safari configuration: The Mac Security Blog » Protect Safari from Fraudulent Digital Certificates

__________________
'
"Do the Right Thing. It will gratify some people and astound the rest." - Mark Twain

krs

Thanks, the check on Safari was turned off for me - I assume that is the default.