CA and Browser Trust Models Need Overhaul, Experts Say

win32sux · 10-23-2010, 08:49 AM

Quote:

The cryptographic underpinnings of the Internet, as presently constituted, are messy, chaotic and rather randomly constructed. And that infrastructure is not only ripe for a variety of attacks, but is not easily fixable, a group of experts said Friday.

At a forum on browser security sponsored by a Washington policy think tank, a group of technologists and policy experts from industry and government outlined the serious architectural and implementation problems with SSL, the certificate authority infrastructure and the way that browsers handle certificates. It was not a pretty picture. The problems extend from the way that CAs issue certificates to how certificates are handled by the major browsers to the way that attackers are able to take advantage of the weaknesses throughout the system.

Complete Article

igadoter · 10-24-2010, 02:02 AM

"How can we ignore the Greater Good?" I don't belive the USA government. If they start to talk about a security - I am a bit paranoic - this means (one of possibilty) 'more control on internet'.