kurtseifried (he/him) · @kurtseifried
555 followers · 602 posts · Server mastodon.social

Good news: the Chinese bjca.cn/ (that is currently in the process of joining the program in all our web browsers) has confirmed they have strong technical controls that separate their root CA business from their alleged business.

Bad news: The alleged spyware business, and tge fact these are bother under control of the same business.

#ca #rootCA #spyware

Last updated 2 years ago

Steve Zakulec · @keen456
24 followers · 206 posts · Server infosec.exchange

This is genuinely fascinating watching a company basically destroy a large part of itself, not so much for what they originally did, but how they reacted when asked about it: groups.google.com/a/mozilla.or

#cacert #rootCA #certificates #trustcor

Last updated 2 years ago

Diego Cordoba 🇦🇷 · @d1cor
514 followers · 2248 posts · Server mstdn.io

RT @helpnetsecurity
Researchers shed light on hidden root CAs - helpnetsecurity.com/2021/11/19 - @QIHU_Official @Tsinghua_Uni @UCIrvine

#certificates #https #rootCA #webpki #security

Last updated 3 years ago

Kevin Vuilleumier 🇨🇭 · @kvuilleumier
341 followers · 5025 posts · Server framapiaf.org

scotthelme.co.uk/impending-doo

C'est une problématique intéressante à laquelle on prête peu d'attention.

Lorsqu'on parle de machines connectées qui ne sont plus mises à jour, on pense immédiatement aux risques de sécurité que ça implique (plus de correctifs) et une incompatibilité avec de futures versions des logiciels.

1/n

#letsencrypt #certificate #expiry #rootCA #ca

Last updated 3 years ago

Grégory PAUL · @paulgreg
130 followers · 1646 posts · Server framapiaf.org