Having just been reading about the Leap-A Trojan I went to check my security settings in the Safari Debug menu (enabled by TinkerTool). In the drop-down menu there are four options:
Performs strict certificate tests
Performs lax certificate checks
Allows expired certificates
Allows expired root certificates
I've never touched these before and it has defaulted to the last one - 'Allows expired root certificates'. Is this a potential security issue? If I was to set it to 'Performs strict certificate tests' what would be the payoff in terms of slowdown/non-access to sites - if any? If TinkerTool was not present, and hence there was no Debug menu, would Safari allow expired root certificates as it's unalterable default?
Top
