Click HERE to learn more about classes Mark is teaching for SANS
Click HERE to learn more about classes Mark is teaching for SANS

Comments

please note that the new thunderbird 6 exe setup is signed with a digital signature that was issued for a different legal entity than the cert used for thunderbird 5:

digital certificate for Thunderbird Setup 6.0.exe is issued for
CN = mozilla corp (thunderbird)
O = mozilla corp (thunderbird)
valid from 26.07.2011 to 26.07.2012
issuer CN = Thawte Code Signing CA - G2

btw, this certificate is different than the one used to sign the Firefox 6 setup exe file, that one was issued to
CN = Mozilla Corporation
OU = Release Engineering
O = Mozilla Corporation
valid from 28.09.2010 to 31.10.2011
issuer CN = Thawte Code Signing CA - G2


the old digital certificate, while still being valid, won't be used anymore because Mozilla Messaging Inc. is being dissolved as a company after it has been re-integrated into Mozilla Labs / Mozilla Corp.

signature of Thunderbird Setup 5.0.exe:
CN = Mozilla Messaging Inc.
OU = Release Engineering
O = Mozilla Messaging Inc.
valid from 28.07.2010 to 09.09.2012
issuer CN = Thawte Code Signing CA - G2

sha1 checksums (en-us builds)
5b146d78ead6cf43257b9076f8affaee8b69e3d4 Thunderbird Setup 5.0.exe
d92cab0f5254ddf36ba5a5bd7c6a95569e9aec1a Thunderbird Setup 6.0.exe

Diary Archives