3 ms·
What does leaking your private key have to do with backdoor keys? Isn't this like saying that CAs are backdoored because somewhere there exists a private key fo
by lawnchair_larry 10y ago
What does leaking your private key have to do with backdoor keys? Isn't this like saying that CAs are backdoored because somewhere there exists a private key for those certs?
- gtirloni 10y agoYes. The Register usually adds a lot of extra drama to their articles. The article gets a bit saner towards the end.
- colemickens 10y agoWhat leaked key? That's... not what happened in this case.
- 45h34jh53k4j 10y agoNo private keys were leaked; however a signed policy file, that lets you disable the protections within secureboot was discovered and repurposed. Its not so much a backdoor key, but an overly permissive mechanism within microsofts secureboot implementation that could be used to implement a backdoor within the system. A similar analogy in the CA world would be when the Microsoft Terminal Server Licensing CA (which accepted user submitted signing requests) was signing certificates that worked in other contexts (ie: https). This didn't break the CA system globally just one overly permissive implementation.
- lawnchair_larry 10y agoYeah, I see now, thanks to the other source. The Register's misuse of "key" followed by excessive drivel in that article had me navigating away with the wrong impression before I could make the connection.