SimpleCAEvacuationPlan
With the uncertainty around DigiCert's acquisition of Symantec's PKI, you might be asking yourself: Does DigiCert have the ability to support my enterprise environment? Will I receive the same level of support? What actions do I need to take? Maybe you are being told the migration will be ea...
HandonComputer (1)
The Return Of Bleichenbacher's Oracle Threat (ROBOT) attack takes advantage of an old vulnerability discovered by Daniel Bleichenbacher in 1998. We have previously seen the Bleichenbacher attack in 2016 when it was used in the DROWN attack on SSL 2.0. The use of a ROBOT attack fully breaks the conf...
AgencyLabSmile
Originally, there were just seven generic top level domains (gTLDs) and a couple hundred country code TLDs (ccTLDs). In 2012, ICANN announced the application for nearly 2000 new gTLDs. Within these applications were requests for about 500 Brand TLDs. Brand TLD The 2012 gTLD application program, al...
Public Key Pinning was great idea at first. Google used static public keys to protect their websites. In doing so, the keys were embedded in Chrome and were useful in helping users find the DigiNotar attack in 2011, and in a mistaken certification authority (CA) certificate issued by TURKTRUST in 20...