4 ms·
I'm curious why NSA's AppLocker paper has been put behind a DoD membership site when it was previously public. It it part of the same movement that prompted the
by mtgx 10y ago
I'm curious why NSA's AppLocker paper has been put behind a DoD membership site when it was previously public. It it part of the same movement that prompted the FBI to remove/hide its public guidelines for using strong encryption?
Ironically, it even gives a certificate error now:
https://www.iad.gov/iad/library/ia-guidance/tech-briefs/application-whitelisting-using-microsoft-applocker.cfm https://www.iad.gov/iad/library/ia-guidance/tech-briefs/appl...
- frankydp 10y agoYou need the DoD Root CA to be trusted for most of these sites to not pop on the alert, and it does not ship with most OSs if any.
- opticalflow 10y agoWhat could possibly go wrong with installing DOD's Root CA? Uhmmmmmmm
- khm 10y agoVery little, since it's primarily for internal DoD use. It was never meant to be a part of the commercial 'web of trust' nonsense, and exists so that DoD doesn't have to trust idiots like Comodo.
- nickpsecurity 10y agoExactly. It's also a logical extension of their COMSEC doctrine which led to things like NSA's EKMS: https://en.wikipedia.org/wiki/EKMS https://en.wikipedia.org/wiki/EKMS