Today we saw the discovery of another rogue SSL certificate – this time for *.google.com. The certificate itself was issued five weeks ago. This will allow an attacker to sniff the traffic to virtually all of Google’s services even with HTTPS enabled. Right now, there’s an unconfirmed report this attack is happening in Iran. Frankly, […]
Latest Comments