Tagged: ssl

To help deter unwanted surveillance, we recommend that users, …

To help deter unwanted surveillance, we recommend that users, especially those in Iran, keep their web browsers and operating systems up to date and pay attention to web browser security warnings. Google: An update on attempted man-in-the-middle attacks (View on gamamb.tumblr.com)

This paper introduces a new attack, the compelled certificate …

This paper introduces a new attack, the compelled certificate creation attack, in which government agencies compel a certificate authority to issue false SSL certificates that are then used by intelligence agencies to covertly intercept and hijack individuals’ secure Web-based communications. We reveal alarming evidence that suggests that this attack is in active use. slight paranoia: Certified Lies (View on gamamb.tumblr.com)