Attack
In a previous post titled [Getting the Most Out of SSL Part 2][1] , we touched on the recommendation that Web servers be configured to prefer Transport Layer Security (TLS) vers…
PKI Consortium blog
Posts by tag OCSP
As originally architected by Netscape and others in the mid 1990s, the certificate issuance process envisioned that the CA would present the certificate and its contents to the …
OCSP Stapling OCSP is a protocol used to check the validity of certificates to make sure they have not been revoked. OCSP is an alternative to Certificate Revocation Lists (CRLs…
We’ve heard the argument that website operators could just use self signed certificates. They are easy to issue and they are “free.” Before issuing self signed certificates, it’…
At the IETF 86 meeting in Orlando last week, there was a working group meeting discussing the operations of the Web PKI. At the previous IETF 85 meeting a birds of a feather was…
Just last week, a new security incident related to certificate revocation checking made headlines. It was discovered that a legitimate website was hosting a malicious Java appli…
Certificates are typically valid for one to three years, and during that time it’s possible that the web site owner or the CA realizes that end users should not trust the certif…
The launch of the CASC has given its members a unique platform through which we can educate users about online security and the best practices in utilizing SSL. That’s why we’ve…
Revocation As a body of global CAs, the CA Security Council is committed to educating server administrators, end users and other interested parties about SSL enhancements and be…
San Francisco, CA. – February 14, 2013 – Leading global certificate authorities announced the creation of the Certificate Authority Security Council (CASC), an advocacy group, c…
