Tag Archives: rogue certification authority
Insider Rogue Certification Authority Attack
Overview The fundamental issue with SSL is that of trust. Despite all the effort that has gone into a robust and cryptographically secure design for SSL, its foundation is still easily abused. In this paper I will explain an often-overlooked area of SSL exploitation. That is the ability for any certificate to act as a […]
Tyler Wrightson's Security Blog 