Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Mozilla and Microsoft said Thursday they are revoking trust in all certificates issued by Digicert, a Malaysian intermediate certificate authority, after it was found that it had issued 22 certificates with weak 512 bit keys and missing certificate extensions and revocation information. . The Malaysian company was issued an intermediate CA certificate in July, 2010 by Entrust, which was licensed for distribution with SSL (Secure Sockets Layer) and S/MIME (Secure/Multipurpose Internet Mail Extensions) certificates. Entrust said in a bulletin on its website that it had been discovered that Digicert Malaysia has issued certificates with weak 512 bit RSA keys and missing certificate extensions. Entrust has revoked the 512 bit certificates issued by Digicert and made them available to major browser vendors to blacklist if found appropriate, it added. The link for this article located at Tech World is no longer available. . Apple and Google withdraw reliance on Symantec SSL certificates due to flawed encryption and absent features, affecting user safety.. trust revocation, ssl certificates, DigiCert, weak keys, certificate authority. . LinuxSecurity.com Team
Linux Security had the chance to talk with Eddy Nigg, founder of StartSSL, an . Linux Security: So, first of all: on your site you have a strong statement, basically against The link for this article located at LinuxSecurity IT is no longer available. . In our special interview, Eddy Nigg elaborates on StartSSL’s distinctive strategy regarding online security and the issuance of SSL certificates.. StartSSL, Web Encryption, Secure Connections, SSL Certificates, Online Security. . LinuxSecurity.com Team
Well-known Certificate Authorities (such as Thawte and VeriSign) exist to serve as authoritative, trusted third-parties for authentication. They are in the business of signing SSL certificates that are used on sites that deal with sensitive information (like account numbers or passwords). . . . . Well-known Certificate Authorities (such as Thawte and VeriSign) exist to serve as authoritative, trusted third-parties for authentication. They are in the business of signing SSL certificates that are used on sites that deal with sensitive information (like account numbers or passwords). If a site's SSL certificate is signed by a trusted authority, then presumably it is possible to verify the identity of a server supplying that certificate's credentials. In order to receive a certificate "blessed" by a well-known CA, you have to prove to them beyond a shadow of doubt that not only are you who you claim to be, but that you have the right to use the certificate in the way you intend to. For example, I may be able to prove to a CA that I am really Rob Flickenger, but they probably won't issue me a signed certificate for Microsoft Corporation, as I have no rights to use that name. (Yes, they probably wouldn't do that. Not again.) In this article, I'll show how OpenSSL is perfectly capable of generating everything you need to run your own Certificate Authority. The CA.pl utility makes the process very simple. . Well-known Certificate Authorities (such as Thawte and VeriSign) exist to serve as authoritative, tr. well-known, certificate, authorities, (such, thawte, verisign), exist, serve, authoritative. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.