LWN.net Logo

The case of the fraudulent SSL certificates

The case of the fraudulent SSL certificates

Posted Mar 24, 2011 14:11 UTC (Thu) by jello (subscriber, #6083)
Parent article: The case of the fraudulent SSL certificates


(Log in to post comments)

The case of the fraudulent SSL certificates

Posted Mar 25, 2011 1:11 UTC (Fri) by ras (subscriber, #33059) [Link]

Thanks for that. I was wondering how a fraudulent certificate could possibly be generated. I was initially surprised by this turn of events, but in hindsight it is obvious the PKI infrastructure would be attached and abused in this way.

An odd thought popped into my head. Israel: our hackers can infect a few computers and knock your nuclear plans off line. Iran: yeah, well ours can attack the PKI infrastructure so we can spy on what our unruly citizens are saying.

Security is become a serious business indeed.

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds