Timeline for Heartbleed - is this scenario possible? how bad would it be?
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 11, 2014 at 14:48 | comment | added | Jason | So, if I understand what you are saying correctly, and I suppose I should have looked up more about how the SSL/CA/Trust system works first, the Root Certificate that is trusted by default, and that essentially resides at the top of the trust chain, is not a typical SSL certificate nor is it served in the way a typical SSL certificate is served? That was where my misunderstanding lay. | |
| Apr 11, 2014 at 14:44 | vote | accept | Jason | ||
| Apr 10, 2014 at 21:57 | comment | added | user27909 | @MattNordhoff You're right, of course. Thanks for the correction! I suppose in my mind I oversimplified that as "bad enough," but of course it's not quite as big a catastrophe to let someone use the root key maliciously versus giving it away outright. | |
| Apr 10, 2014 at 21:52 | comment | added | Andrew Russell | Thanks for keeping me honest @pyramids, At the very least the CA business will be likely closed unless the browser makers can be convinced that 'things have been fixed'. | |
| Apr 10, 2014 at 21:37 | comment | added | Matt Nordhoff | @pyramids I don't think Comodo has ever misplaced a private key. Their systems just rubber-stamped certs for hacked resellers. If we're referring to the 2011 incident. | |
| Apr 10, 2014 at 21:32 | comment | added | user27909 | What's the empirical evidence for "if they are lost, they will be Out of Business?" Granted, DigiNotar is no more. Yet Comodo survived and seems to be doing well. Were there any others so far? | |
| Apr 10, 2014 at 21:20 | history | answered | Andrew Russell | CC BY-SA 3.0 |