Skip to main content
replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
Source Link

See also the question on Certificate TransparencyCertificate Transparency which looks like a helpful approach to discovering bad certificates and policy violations earlier.

See also the question on Certificate Transparency which looks like a helpful approach to discovering bad certificates and policy violations earlier.

See also the question on Certificate Transparency which looks like a helpful approach to discovering bad certificates and policy violations earlier.

update 7 india cca issues
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118

Update 7 Yet another set of "misissued certificates", via the Indian Controller of Certifying Authorities (India CCA) in 2014: Google Online Security Blog: Maintaining digital certificate security

See also the question on Certificate Transparency which looks like a helpful approach to discovering bad certificates and policy violations earlier.

See also the question on Certificate Transparency which looks like a helpful approach to discovering bad certificates and policy violations earlier.

Update 7 Yet another set of "misissued certificates", via the Indian Controller of Certifying Authorities (India CCA) in 2014: Google Online Security Blog: Maintaining digital certificate security

See also the question on Certificate Transparency which looks like a helpful approach to discovering bad certificates and policy violations earlier.

update 6 - ANSSI, Trustwave, Certificate Transparency; Post Made Community Wiki
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118

Update 6 Several Certificate Authorities have been caught violating the rules. That includes the French cyberdefense agency (ANSSI), and Trustwave, each of which was linked to spoofing of digital certificates.

See also the question on Certificate Transparency which looks like a helpful approach to discovering bad certificates and policy violations earlier.

Update 6 Several Certificate Authorities have been caught violating the rules. That includes the French cyberdefense agency (ANSSI), and Trustwave, each of which was linked to spoofing of digital certificates.

See also the question on Certificate Transparency which looks like a helpful approach to discovering bad certificates and policy violations earlier.

tunisia and facebook
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
add intro; link to soghoian
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
[DigiNotar Hack Highlights the Critical Failures of our SSL Web Security Model | Freedom to Tinker](https://freedom-to-tinker.com/blog/sjs/diginotar-hack-highlights-critical-failures-our-ssl-web-security-model)
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
added 94 characters in body
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
update 4
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
added 446 characters in body
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
try again
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
more on comodo
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
comodo practice of avoiding intermediary
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
update after comodo attack; deleted 6 characters in body
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading
Source Link
nealmcb
  • 20.9k
  • 6
  • 73
  • 118
Loading