Tag Archives: Java

Java Secures Supply Chains through Code Signing

December 11, 2013 by Bruce Morton     No Comments

This post was originally published by Bruce Morton & Erik Costlow on the CA Security Council blog. We have recently discussed the benefits of code signing in two posts: Securing Software Distribution with Digital Signatures and Improving Code Signing. These posts covered the role of code signatures as a “digital shrinkwrap” designed to answer a simple question: [Read More...]

Filed Under: Code Signing Tagged With: Java, Oracle

Should You Use SHA-2?

December 11, 2012 by Bruce Morton     1 Comment

A common question we receive from certificate customers: should we ask Entrust to sign our certificate with a signature using the SHA-2 hashing algorithm?

Nitol Malware — Leveraging Dynamic DNS for Nefarious Gains

September 19, 2012 by Jason Soroko     No Comments

A malicious botnet called ‘Nitol’ was interrupted by Microsoft on Sept. 13. ‘Nitol’ was using a Dynamic DNS to enable the infected bot computers to communicate with the hacker’s command and control server. For background, it is possible to serve a website from a home computer, but the difficulty is that your home Internet service [Read More...]

Filed Under: Malware Tagged With: BotnetsBotnets, control server, DNS

How to Digitally Sign Code

June 18, 2012 by Bruce Morton     No Comments

Various application platforms support code-signing and provide different tools to perform the signing. Here is a list of the more common code-signing types and references as to where you can find guides for the given application. Adobe AIR Adobe – Digitally signing an AIR file Apple Mac OS X Developer Library – Code Signing and [Read More...]

Code Signing

June 17, 2011 by Bruce Morton     No Comments

Although this is the Entrust Insight SSL Blog, Entrust Certificate Services issues other types of certificates such as Code Signing, Adobe CDS and Client S/MIME. The purpose of this post is to kick off a series on Code Signing. When the series is completed, this post can be used as an index to all other [Read More...]