Certificate Pinning

(get it in RSS or Atom)

Turkish Certificate Authority screwup leads to attempted Google impersonation

by Chester Wisniewski on January 4, 2013 | 2 Comments
shutterstock_brokenpadlock250

Another Certificate Authority has been caught out having issued certificates that were being used to impersonate Google. Does the SSL padlock not mean we are safe anymore?

SSL certificate safety bolstered by standards that lessen dependence on CAs

by Chester Wisniewski on June 1, 2012 | 2 Comments
SSL certificate safety bolstered by standards that lessen dependence on CAs

Two new proposals have been submitted to the IETF attempting to fix some of the trust problems inherent in the current SSL certificate system used to secure our online communications.