We have previously reviewed [implementation of SHA 2][1], but with [Bruce Schneier stating the need to migrate away from SHA 1][2] and the [SHA 1 deprecation policy from Microso…
PKI Consortium blog
Posts by author Bruce Morton
We have recently discussed the benefits of code signing in two posts: [Securing Software Distribution with Digital Signatures][1] and [Improving Code Signing][2]. These posts co…
Internet Surveillance The big news at [IETF 88 in Vancouver][1] was the technical plenary on [Hardening the Internet][2] which discussed the issue of pervasive surveillance. Per…
Code signing certificates from publicly trusted Certification Authorities (CAs) fulfill a vital need for authentication of software distributed over the Internet in our intercon…
Chrome
The current browser certification authority (CA) trust model allows a website owner to obtain its SSL certificate from any one of a number of CAs. That flexibility also means th…
There is an industry myth that certification authorities (CAs) are not regulated. In fact publicly trusted SSL CAs support the development of industry regulations and have been …
We’ve heard the argument that website operators could just use self signed certificates. They are easy to issue and they are “free.” Before issuing self signed certificates, it’…
At the IETF 86 meeting in Orlando last week, there was a working group meeting discussing the operations of the Web PKI. At the previous IETF 85 meeting a birds of a feather was…
