ssl certificate | DataProtectionCenter.com

The bigger issue with the rogue Google SSL cert

30

Aug

2011

Today we saw the discovery of another rogue SSL certificate – this time for *.google.com. The certificate itself was issued five weeks ago. This will allow an attacker to sniff the traffic to virtually all of Google’s services even with HTTPS enabled. Right now, there’s an unconfirmed report this attack is happening in Iran. Frankly, […]

Category General Written by Securelist / Blog 0 Comments

Diginotar Hacked by Black.Spook and Iranian Hackers

30

Aug

2011

Diginotar is a Dutch Certificate Authority. They sell SSL certificates. Somehow, somebody managed to get a rogue SSL certificate from them on July 10th, 2011. This certificate was issued for domain name .google.com. What can you do with such a certificate? Well, you can impersonate Google — assuming you can first reroute Internet traffic for […]

Category General Written by F-Secure Antivirus Research Weblog 0 Comments

DEFCON 2011: SSL and the future of authenticity

16

Aug

2011

I had the pleasure of attending Moxie Marlinspike’s DEFCON talk “SSL And The Future Of Authenticity.” Marlinspike is a great presenter and he doesn’t just point out the problems with what we are doing now, but proposes solutions, often with working proof-of-concept code. Marlinspike didn’t disappoint and began the talk with a funny story, rather […]

Category General Written by Naked Security - Sophos 0 Comments

The Latest in IT Security

Posts Tagged ‘ssl certificate’

The bigger issue with the rogue Google SSL cert

Diginotar Hacked by Black.Spook and Iranian Hackers

DEFCON 2011: SSL and the future of authenticity

Categories

Featured

Archives

Latest Comments

About Us

Contact Us