Re: [IP] Creating a rogue CA certificate

2008-12-31 Thread Adam Thornton
On Dec 31, 2008, at 4:34 PM, David Boyes wrote: Interesting new attack on SSL-based security - compromise the CA infrastructure. Amazing that CAs still use MD5. I would have expected Thawte, anyway, to know better. Adam

Fwd: [IP] Creating a rogue CA certificate

2008-12-31 Thread David Boyes
Interesting new attack on SSL-based security - compromise the CA infrastructure. Begin forwarded message: -- Forwarded Message From: InfoSec News Date: Wed, 31 Dec 2008 09:08:14 + To: "i...@infosecnews.org" Subject: [ISN] Creating a rogue CA certificate http://www.win.tue.nl/has