Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!


Forgot your password?
Slashdot Deals: Deal of the Day - Pay What You Want for the Learn to Code Bundle, includes AngularJS, Python, HTML5, Ruby, and more. ×

Submission + - Government could forge SSL certificates (betanews.com)

FutureDomain writes: Is SSL becoming pointless? Researchers are poking holes in the chain of trust for SSL certificates which protect sensitive data.
According to these hypothesized attacks, governments could compel certificate authorities to give them phony certificates that are signed by the CA, which are then used to perform man in the middle attacks.
They point out that Verisign already makes large sums of money by facilitating the disclosure of US consumers' private data to US government law enforcement.
The researchers are developing a Firefox plugin that checks past certificates and warns of anomalies in the issuing country, but not much can help if government starts spying on the secure connections of its own citizens.

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Government could forge SSL certificates

Comments Filter:

Computers are unreliable, but humans are even more unreliable. Any system which depends on human reliability is unreliable. -- Gilb