4 ms·

Could this be anything like the DigiNotar hack?[0] If it came out that Symantec's certificate authority was used to issue fraudulent certificates, the damage t

Could this be anything like the DigiNotar hack?[0] If it came out that Symantec's certificate authority was used to issue fraudulent certificates, the damage to their business could be in the hundreds of millions. What if the silence is because Symantec is trying to figure out the best way to break the news to us? Edit: After a bit more reading, Symantec has some history of monitoring .pw for malware and spam.[1][2][3] Perhaps someone just decided they wanted nothing more to do with PW issuer Directi, which apparently has a poor reputation.[4] [0]https://en.wikipedia.org/wiki/DigiNotar https://en.wikipedia.org/wiki/DigiNotar [1]http://www.symantec.com/connect/blogs/rise-pw-urls-spam-messages http://www.symantec.com/connect/blogs/rise-pw-urls-spam-mess... [2]http://www.symantec.com/connect/blogs/pw-hit-and-run-spam-royal-baby-trend http://www.symantec.com/connect/blogs/pw-hit-and-run-spam-ro... [3]http://www.symantec.com/connect/blogs/rig-exploit-kit-used-recent-website-compromise http://www.symantec.com/connect/blogs/rig-exploit-kit-used-r... [4]http://www.jl.ly/Email/palau.html http://www.jl.ly/Email/palau.html

nailer 11y ago
Wait. I'm the last person to defend Symantec (see [1] [2]) but the headline seems to be a load of rubbish, or at least certainly isn't backed by the content of the article. Here are the only two reseller quotes from the article: > Reseller rep.: > We regret to inform you that certificate [number] for www.canary.pw domain has been revoked by the Certificate Authority due to the site being flagged as potentially containing malware in a recent site scanning by Symantec (owner of GeoTrust). Unfortunately we were not warned of the upcoming revocation, so we apologize for any inconvenience that this may cause. A single website, that allows people to search stolen data, eg the Ashley Madison hack, and asks people to submit stolen data, has had it's certificate revoked. and: > Reseller rep.: > As per our check with Symantec, they will no longer be issuing SSL certs to .PW domains. You are advised to remove the SSL certificate from the server to avoid security errors related to a revoked certificate. > And furthermore Symantec are no longer issuing certificates for the .pw TLD. Neither quote equates to Symantec having 'revoked all SSL certificates for .PW TLD domains' as mentioned in the headline and this HN submission. As much as I dislike Symantec - and I really dislike Symantec - I think this article's headline is false. [1]. https://certsimple.com/blog/seal-in-search https://certsimple.com/blog/seal-in-search [2]. https://certsimple.com/blog/sgc-ssl-certificates https://certsimple.com/blog/sgc-ssl-certificates
- nailer 11y ago
  If anyone's reading this later: I've confirmed this with an industry contact and it's true: ridiculous as it might seem, Symantec are indeed revoking all existing .pw certificates.

nailer 11y ago

Wait. I'm the last person to defend Symantec (see [1] [2]) but the headline seems to be a load of rubbish, or at least certainly isn't backed by the content of the article. Here are the only two reseller quotes from the article: > Reseller rep.: > We regret to inform you that certificate [number] for www.canary.pw domain has been revoked by the Certificate Authority due to the site being flagged as potentially containing malware in a recent site scanning by Symantec (owner of GeoTrust). Unfortunately we were not warned of the upcoming revocation, so we apologize for any inconvenience that this may cause. A single website, that allows people to search stolen data, eg the Ashley Madison hack, and asks people to submit stolen data, has had it's certificate revoked. and: > Reseller rep.: > As per our check with Symantec, they will no longer be issuing SSL certs to .PW domains. You are advised to remove the SSL certificate from the server to avoid security errors related to a revoked certificate. > And furthermore Symantec are no longer issuing certificates for the .pw TLD. Neither quote equates to Symantec having 'revoked all SSL certificates for .PW TLD domains' as mentioned in the headline and this HN submission. As much as I dislike Symantec - and I really dislike Symantec - I think this article's headline is false. [1]. https://certsimple.com/blog/seal-in-search https://certsimple.com/blog/seal-in-search [2]. https://certsimple.com/blog/sgc-ssl-certificates https://certsimple.com/blog/sgc-ssl-certificates

nailer 11y ago
If anyone's reading this later: I've confirmed this with an industry contact and it's true: ridiculous as it might seem, Symantec are indeed revoking all existing .pw certificates.