Difference between revisions of "SSL certificates"
From Organic Design wiki
Infomaniac (talk | contribs) (Alternatives) |
({{legacy}}) |
||
| (One intermediate revision by one other user not shown) | |||
| Line 1: | Line 1: | ||
| + | {{legacy}} | ||
== Wildcard certs == | == Wildcard certs == | ||
RapidSSL do a cheap wildcard cert for US$199 (around half price), but we found that the untrusted root authority still occurs for Windows XP. This means the users will be required to add an exception, which they'd need to do even if we just use a self-signed certificate. | RapidSSL do a cheap wildcard cert for US$199 (around half price), but we found that the untrusted root authority still occurs for Windows XP. This means the users will be required to add an exception, which they'd need to do even if we just use a self-signed certificate. | ||
| Line 10: | Line 11: | ||
[[File:XP successful certificate import.jpg]] | [[File:XP successful certificate import.jpg]] | ||
| − | |||
| − | ==Alternatives to | + | ==Alternatives to Certificate Authorities== |
| + | |||
| + | ;[http://it.slashdot.org/story/11/08/31/2221248/Hackers-May-Have-Nabbed-Over-200-SSL-Certificates Hackers May Have Nabbed Over 200 SSL Certificates] : "Hackers may have obtained more than 200 digital certificates from a Dutch company after breaking into its network, including ones for Mozilla, Yahoo and the Tor project — a considerably higher number than DigiNotar has acknowledged earlier this week when it said 'several dozen' certificates had been acquired by attackers. Among the certificates acquired by the attackers in a mid-July hack of DigiNotar, Van de Looy's source said, were ones valid for mozilla.com, yahoo.com and torproject.org, a system that lets people connect to the Web anonymously. Mozilla confirmed that a certificate for its add-on site had been obtained by the DigiNotar attackers. 'DigiNotar informed us that they issued fraudulent certs for addons.mozilla.org in July, and revoked them within a few days of issue,' Johnathan Nightingale, director of Firefox development, said Wednesday. Looy's number is similar to the tally of certificates that Google has blacklisted in Chrome." | ||
| − | + | *http://convergence.io/ - An agile, distributed, and secure strategy for replacing Certificate Authorities | |
| + | *http://perspectives-project.org/ - a new approach to helping computers communicate securely on the Internet. With Perspectives, public “network notary” servers regularly monitor the SSL certificates used by 100,000s+ websites to help your browser detect “man-in-the-middle” attacks without relying on certificate authorities. | ||
| + | [[Category:SSL]] | ||
Latest revision as of 22:44, 26 March 2018
|
Wildcard certs
RapidSSL do a cheap wildcard cert for US$199 (around half price), but we found that the untrusted root authority still occurs for Windows XP. This means the users will be required to add an exception, which they'd need to do even if we just use a self-signed certificate.
Exmaple images
Alternatives to Certificate Authorities
- Hackers May Have Nabbed Over 200 SSL Certificates
- "Hackers may have obtained more than 200 digital certificates from a Dutch company after breaking into its network, including ones for Mozilla, Yahoo and the Tor project — a considerably higher number than DigiNotar has acknowledged earlier this week when it said 'several dozen' certificates had been acquired by attackers. Among the certificates acquired by the attackers in a mid-July hack of DigiNotar, Van de Looy's source said, were ones valid for mozilla.com, yahoo.com and torproject.org, a system that lets people connect to the Web anonymously. Mozilla confirmed that a certificate for its add-on site had been obtained by the DigiNotar attackers. 'DigiNotar informed us that they issued fraudulent certs for addons.mozilla.org in July, and revoked them within a few days of issue,' Johnathan Nightingale, director of Firefox development, said Wednesday. Looy's number is similar to the tally of certificates that Google has blacklisted in Chrome."
- http://convergence.io/ - An agile, distributed, and secure strategy for replacing Certificate Authorities
- http://perspectives-project.org/ - a new approach to helping computers communicate securely on the Internet. With Perspectives, public “network notary” servers regularly monitor the SSL certificates used by 100,000s+ websites to help your browser detect “man-in-the-middle” attacks without relying on certificate authorities.
