Published at LXer:

DigiNotar B.V., a unit of VASCO Data Security International, Inc., is an Internet Trust Service Provider based in the Netherlands. Part of their business involves issuing digital certificates. DigiNotar’s security system was compromised and they failed to notify everybody they were supposed to. A result of that breach is that fake certificates were issued – in DigiNotar’s name – for Mozilla and some others. The extent of the damage is so bad that The Mozilla Foundation revoked certificates issued by DigiNotar. If updates have not been issued yet, delete DigiNotar from the list of Certificate Authorities. Here’s how to do it.

Read More...