if root is compromised it sounds promising : http://www.vasco.com/company/press_room/news_archive/2011/acquisition_diginotar.aspx http://www.vasco.com/company/

if root is compromised it sounds promising : http://www.vasco.com/company/press_room/news_archive/2011/acquisition_diginotar.aspx http://www.vasco.com/company/press_room/news_archive/2011/ac... "...DigiNotar is an official Dutch certification authority, capable of issuing, validating and registering certificates (identities) of Dutch nationals and entities that are recognized throughout the European Union and are used to authenticate government applications. As such, DigiNotar provides VASCO with a strong foothold in the Dutch eGovernment market with the potential to expand the product line to government applications in other countries. Currently, DigiNotar’s market scope for its CA activities is limited to the Netherlands. VASCO may decide to introduce DigiNotar as a certification authority in other EU countries...." all that security was riding on 10M euros (with such [meager] amounts in play, one would think that it would be easier for a player like Iran just buy an authority than to crack/hack it, though seems like VASCO was faster (if of course VASCO isn't in the game as well) :) : "...VASCO acquired DigiNotar in stock and asset purchase for aggregated cash consideration of Euro 10.0 million..." what is the cost in Netherlands to have a reasonably secure office building with some access controlled areas suitable for CA authority core operations? Sounds like very cheap.