Moving the Washington Post to HTTPS

Re:Moving the Washington Post to HTTPS by atmosx on Friday December 11, 2015 @06:39AM (#10716530)

“This [attack] was extremely sophisticated and critically executed… It was a very well orchestrated, very clinical attack, and the attacker knew exactly what they needed to do and how fast they had to operate. All the IP addresses were from Iran. All the above leads us to one conclusion only: that this was likely to be a state-driven attack” - Melih Abdulhayoglu, Comodo Founder.

Comodo is the CA that issued the biggest percentage of certificates worldwide, they even won an award that year or the year after at RSA conference! If you take a closer look though, as Moxie did[1] - we ’re all grateful - you find out that it takes a douchebag with questionable skillset to bring down the entire infrastructure down to it’s knees. It's hilarious and tragic at the same time.

[1] https://www.youtube.com/watch?v=pDmj_xe7EIQ

[ Parent | on HN ]

Re:Moving the Washington Post to HTTPS by thetmkay on Friday December 11, 2015 @08:24AM (#10716904)

Thanks for the link!

I will question the relevance of the first half of the talk (about CAs and SSL) in 2015, with TLS and the CA/B Forum.

But his main thesis about trust agility is quite spot on. I'd never considered it before, and am going to look into Convergence and TACK. He raises a fantastic question - the duration of trust is a real concern.

[ Parent | on HN ]