|
How to stop a certificate authority breach
TechRepublic The increase in attacks was highlighted by the Flame malware's abuse of a Microsoft digital certificate, which demonstrated how susceptible organizations are to CA breaches. NIST's new "Preparing for and Responding to Certification Authority Compromise … |
You may have heard of certificate pinning. Microsoft is looking at applying the technology to signed software. Have a listen as Patrick Gray, host of the renowned Risky Business security podcast, discusses the issue with Naked Security’s Paul Ducklin.
Naked Security – Sophos
Google, Microsoft and Mozilla announced on Jan 3 that they are revoking trust in two digital certificates accidentally issued by Turkish certificate authority (CA) TURKTRUST. When you start talking about another CA fiasco, there are many people whose eyes glaze over when reading technical details because they know it’s bad, but really have no idea why it is so dangerous for digital certificates that…
Ms. Smith’s blog
|
Internet security more at risk because of certificate mistake
NBCNews.com An intermediate digital certificate for *.google.com domains has been blocked by Google, Mozilla and Microsoft after a Turkish certificate authority incorrectly provided it to two other Turkish organizations who are not authorized for the privileges … |