March 2012 - Entrust, Inc. 1-5 of 5

Potential Breach Affecting VISA, MasterCard — EMV Won’t be Here Soon Enough

March 30, 2012 by Mike Byrnes
Brian Krebs scooped a major story yesterday about a potential major credit card breach at a U.S.-based payment processor affecting both VISA and MasterCard. The news made headlines across top media outlets for good reason: this is NOT the first major credit card breach. 2011 saw a wrath of breaches including Epsilon and Sony, not [Read More...]

Dutch Government: PKI alternatives, replacements not on horizon

March 29, 2012 by Dave Rockvam
In July 2011, Dutch certification authority (CA) DigiNotar experienced a security incident that affected the national security infrastructure of both governmental and non-governmental bodies in the Netherlands. The government commissioned a report looking into the incident and the broader CA/SSL market. One of the conclusions of the Dutch government’s report is that alternatives to PKI [Read More...]

Apple’s UDIDs – Rejected for App Developers?

March 29, 2012 by David Mahdi
I recently read two interesting posts on this subject — one from GigaOM and another from Gartner’s Avivah Litan. Both posts talk about Apple’s recent rejections of apps using the UDID (unique identification number) on iPhones/iPads. The lead issue here is likely related to privacy. As the GigaOM posting pointed out, the UDID can be [Read More...]

NFC Technology Center Stage at RSA 2012

March 9, 2012 by David Mahdi
Having just returned from RSA Conference 2012, I spent a great deal of time in and around the Moscone Center. I encountered a few point-of-sale (POS) terminals that were equipped with NFC readers. More specifically, the readers that were intended for use with Google Wallet. I even demoed for Entrust our latest in mobile security [Read More...]

Google Rethinks Revocation

March 7, 2012 by Jon Callas
Google has decided in Chrome that they’re going to take a different approach to certificate revocation. Chrome developer Adam Langley describes the decision in detail in his blog, Imperial Violet. Unlike a number of CAs, we think this is a pretty good idea, even if incompletely executed so far. Revocation is a difficult task. It [Read More...]