From: spamtrap47@adelphia.net   
      
   kate0104@hotmail.com wrote:   
   > Suppose someone is able to compromise my DNS   
   > Suppose now I try to establish an IPSec tunnel to my Cisco concentrator   
   > but I end up connecting to a different malicious concentrator.   
   > Suppose this malicious concentrator has a valid Certificate signed by a   
   > known CA.   
   > Would my Cisco VPN client realize there's something wrong during its   
   > peer identity validation ?   
   >   
   > thank you for your answers   
   >   
      
   Unless somebody has pulled one over on the CA the common name won't match.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)