4 ms·
Most likely also Vasco security tokens since NSA owned Digitalnotar which Vasco owns. CA is a flawed security model with governments wanting to read all your d
by acd 13y ago
Most likely also Vasco security tokens since NSA owned Digitalnotar which Vasco owns.
CA is a flawed security model with governments wanting to read all your data. Far to easy to forge a CA either by running one covertly or hacking into one.
One subset of users will get man in the middle certificates and interception.
The other set will get normal certificates.
How many really check the certificate fingerprints and who issued the certificate?
- marshray 13y agoI thought the evidence was pretty clear that Diginotar was pwned by the Iranians. Those certs did end up on the .ir national ISP's firewall doing man-in-the-middle attacks on Gmail users within Iran.