Recent Features
| |||||||||||||
Fraudulent *.google.com certificate issuedFraudulent *.google.com certificate issuedPosted Aug 30, 2011 19:15 UTC (Tue) by butlerm (subscriber, #13312)In reply to: Fraudulent *.google.com certificate issued by raven667 Parent article: Fraudulent *.google.com certificate issued
>one would need to run an entire shadow DNS infrastructure to pull this off
At a minimum you would need the DNS root private key (or the cooperation of the people who hold the key) to do this without compromising the client, which places it out of reach for any but the governments powerful enough to compel ICANN to give them the key or sign a full set of compromised TLDs for them.
(Log in to post comments)
|
|||||||||||||