4 ms·
This article doesn't have much details on what the actually attack involved. Anyone have actual details. I would assume that VeriSign has a very segregated netw
by nkassis 15y ago
This article doesn't have much details on what the actually attack involved. Anyone have actual details. I would assume that VeriSign has a very segregated network and a breach somewhere would have a hard time propagating to their more important things like their CA signing server and .com stuff.
- marshray 15y agoThe (reported) fact that they were hacked repeatedly in 2010 and the CTO at that time (claims he) didn't learn of it until Reuters called him for a comment doesn't exactly paint a reassuring picture. I bet Symantec is a little irritated that they bought the VeriSign^TM CA business in 2010. Are they going to want their money back? If they can't prove there was no compromise of the private keys, will Symantec reissue the 30 year VeriSign root certs? EDIT: The SEC filing is here (keyword "breach") https://investor.verisign.com/secfiling.cfm?filingID=1193125-11-285850&CIK=1014473 https://investor.verisign.com/secfiling.cfm?filingID=1193125... Interesting how the filing mentions the threat to their DNS business. Perhaps the potential risk to the root CA is no longer considered relevant since they've sold it?
- deleted 15y ago[deleted]
- lawnchair_larry 15y agoI bet Symantec is a little irritated that they bought the VeriSign^TM CA business in 2010. Are they going to want their money back? Whatever security problems Verisign has had, Symantec's are far worse.