Only 2 Percent Proceed Past “Untrusted Connection” Message San Francisco – April 13, 2015 – The CA Security Council (CASC), an advocacy group committed to the advancement of the…
PKI Consortium blog
Posts by tag CASC
Once again Browsers and Certificate Authorities are in the news over the reported mis issuance of an SSL server certificate to a google.com domain. Discovered by Google most lik…
Code signing certificates are used to sign software objects to authenticate that they originated from a verified source, allowing developers to avoid warnings commonly displayed…
UPDATED September 23, 2014: The following blog post has been updated with action taken in recent weeks, as well as to reflect helpful user comments left on our [August 28 blog p…
On August 19, [Google announced a new policy][1] that accelerates the deprecation of SHA 1 certificates, potentially causing websites using SHA 1 certificates to display warning…
Short answer: Government CAs can still be considered “trusted third parties,” provided that they follow the rules applicable to commercial CAs. Introduction On July 8 Google ann…
Google
The recent Heartbleed issue has reawakened interest in SSL certificate revocation (see Adam Langley’s [blog][1], Larry Seltzer’s articles [here][2] and [here][3], and Steve Gibs…
The Heartbleed bug spurred server administrators worldwide to work closely with Certification Authorities (CAs) in rekeying and reissuing potentially vulnerable SSL certificates…
On April 7, 2014, a vulnerability in the OpenSSL cryptographic library was announced to the Internet community. Aptly labeled as the Heartbleed bug, this vulnerability affects O…
Last year, Edward Snowden, an American computer specialist working as a contractor for the National Security Agency (“NSA”), shocked web users around the world by publicizing do…
