News for hackers. Stuff that matters.
Re:Verisign/RapidSSL Responds To Certificate Vulnerability by tokenadult on Tuesday December 30, 2008 @07:30PM (#414893)
"We applaud security research of this sort and are glad that white hats like the "MD5 Collision Inc." group make a point of investigating online security. This group went to great lengths to keep its findings private, and unfortunately that included ensuring that VeriSign did not receive any of this information ahead of the actual presentation, rendering it impossible for us to begin work on mitigating this issue prior to this morning. So I'll caution you that these responses are preliminary, and if it turns out that any of the information we've received is inaccurate, my responses may change."

I really like this, especially the last sentence. That's refreshingly direct communication.

There are no comments on this comment yet.