Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Monday November 21, @04:38PM   Printer-friendly
from the one-at-the-time dept.

Last week Bruce Schneier published An Untrustworthy TLS Certificate in Browsers and now Ian Carroll has published Security concerns with the e-Tugra certificate authority.

Ian is best known for the death of the EV (Extended Validation) certificates. He legally registered a colliding entity name and then got an EV certificate for his site stripe.ian.sh. As this site is not online any more, a good write up of this is Extended Validation Certificates are (Really, Really) Dead by Troy Hunt.

Troy Hunt is also known for his website ';--have i been pwned?.

Schneier suggests that it might be time to disable / remove trust for the following Certificate Authorities (CAs):

  • TrustCor
  • E-Tugra

Cory Doctorow gives a very good explanation the the problem in general and its causes here. Basically, we are just too trusting and we believe that others are looking after our interests. It appears that they are not.


Original Submission

 
This discussion was created by janrinok (52) for logged-in users only, but now has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 4, Interesting) by fab23 on Monday November 21, @06:31PM

    by fab23 (6605) Subscriber Badge on Monday November 21, @06:31PM (#1280855) Homepage

    Yes Certificate Patrol was kind of useful but sometimes also annoying (I had on purpose to many alerts active). I think later version also supported to accept different certificates for the same site as long as they were from the same (sub) CA.
    The old site http://patrol.psyced.org/ [psyced.org] is still available, but the add-on on the Mozilla site is gone. It did not survive the change to WebExtensions.

    I never found a replacement for it and have not searched any more.

    Starting Score:    1  point
    Moderation   +2  
       Interesting=2, Total=2
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   4