News for hackers. Stuff that matters.

A comment on The Forged Apple Employee Badge. Parent comment

Re:The Forged Apple Employee Badge by adolph on Thursday May 16, 2024 @10:34PM (#40385779)
Yes

On August 9, 2010, Symantec completed its approximately $1.28 billion acquisition of Verisign's authentication business, including the Secure Sockets Layer (SSL) Certificate Services, the Public Key Infrastructure (PKI) Services, the Verisign Trust Services, the Verisign Identity Protection (VIP) Authentication Service, and the majority stake in Verisign Japan.

https://en.wikipedia.org/wiki/Verisign

[ Parent | on HN ]
Re:The Forged Apple Employee Badge by omarfarooq on Thursday May 16, 2024 @10:55PM (#40385924)
That's based on verifiable cryptography.
[ Parent | on HN ]
Re:The Forged Apple Employee Badge by d0gsg0w00f on Thursday May 16, 2024 @11:10PM (#40385994)
Yeah, but someone has to first trust the signer.

I can start a CA tomorrow, doesn't mean anyone will put my root on their OS distro.

[ Parent | on HN ]
Re:The Forged Apple Employee Badge by adolph on Friday May 17, 2024 @08:17AM (#40389084)
The crypto is the middle part. "certificates of authenticity" have to cover the top and bottom ends. The sibling comment referred to the top. At the bottom, Verisign had a DUNS and payment dance that had more appearance than substance in determining authenticity.
[ Parent | on HN ]