News for hackers. Stuff that matters.
Re:CA Comodo used broken OCR and issued certificates to the ... by emodendroket on Friday October 21, 2016 @08:21PM (#12766143)
If that happens (and there are a fair number of pieces that had to fall into place for this attack to work) it puts us back to where it would be if we had no CA. So, do I have absolute confidence? No. But I think the risk is significantly reduced.
Re:CA Comodo used broken OCR and issued certificates to the ... by bandrami on Friday October 21, 2016 @09:35PM (#12766501)
Right, which is why I said we should treat Comodo certificates as if they were self-signed.
Re:CA Comodo used broken OCR and issued certificates to the ... by emodendroket on Saturday October 22, 2016 @03:12PM (#12770115)
I don't think you really got what I was trying to say if that's your response.