Re:Creating a rogue CA certificate with MD5 hash collisions
by gojomo on Tuesday December 30, 2008 @06:09PM
(#414814)
This one will hopefully just put RapidSSL out of business.
I did not realize this until just now, but RapidSSL is owned by GeoTrust, which is owned by Verisign... so RapidSSL may not disappear in a puff of logic as one might hope.
Here's Verisign's report that they've discontinued MD5 and are offering free replacement certificates:
I did not realize this until just now, but RapidSSL is owned by GeoTrust, which is owned by Verisign... so RapidSSL may not disappear in a puff of logic as one might hope.
Here's Verisign's report that they've discontinued MD5 and are offering free replacement certificates:
https://blogs.verisign.com/ssl-blog/2008/12/on_md5_vulnerabi...