News for hackers. Stuff that matters.

A comment on Sysadmins see evidence that they have been hacked by GCHQ [video]. Parent comment

Re:Sysadmins see evidence that they have been hacked by GCHQ... by noinsight on Monday September 15, 2014 @02:50AM (#8317575)
The certificate authority can issue certificates for absolutely anything (any domain) they want and your software will happily claim it's valid if the CA is trusted.

That is why the CA-system is a joke, you only need to compromise any of the CA's that are trusted by default to fool all certificate users.

[ Parent | on HN ]
Re:Sysadmins see evidence that they have been hacked by GCHQ... by emikulic on Monday September 15, 2014 @07:25AM (#8318209)
Modulo certificate pinning.
[ Parent | on HN ]