After the news broke that [40 million credit card numbers were stolen from Target][1] in a data breach of epic proportions, many of their customers went to work checking their a…
PKI Consortium blog
Posts by tag SSL/TLS
SSL/TLS
The SSL/TLS protocol has more to offer than just providing you with transmission encryption. Its main benefit is that it provides a way for third parties to authenticate connect…
SSL/TLS
Previously, we advised that the [SSL industry must move to the SHA 2 hashing algorithm][1] for certificate signatures. We thought it would be helpful to provide the reasoning be…
Microsoft
“CA Day” (also known as CA Conformity Assessment) was hosted by the German company TuVIT in Berlin on January 16, 2014. In attendance were approximately 100 people from mostly E…
Mixed Content
There is no doubt that content owners and publishers have a duty to encourage trust and the confidence during internet usage by adopting security best practices. If a customer b…
We have seen recently that Google detected that publicly trusted TLS/(SSL) certificates had been created for Google domains without having been requested by Google themselves. T…
Code Signing
Looking Back at 2013 Protocol Attacks The year started with a couple of SSL/TLS protocol attacks: [Lucky Thirteen][1] and [RC4 attack][2]. Lucky Thirteen allows the decryption o…
After the CASC’s [previous][1] letter addressing ICANN’s proposal to delegate nearly 2000 new gTLDs for use on the public Internet, ICANN identified and initiated an extensive s…
We have previously reviewed [implementation of SHA 2][1], but with [Bruce Schneier stating the need to migrate away from SHA 1][2] and the [SHA 1 deprecation policy from Microso…
Internet Surveillance The big news at [IETF 88 in Vancouver][1] was the technical plenary on [Hardening the Internet][2] which discussed the issue of pervasive surveillance. Per…
