Security News

Microsoft considers blocking SHA-1 certificates after cost of collisions slashed (ArsTechnica)
2015-11-06 18:56

Configure your Windows Remote Desktop (RDP) to use SSL with a StartSSL (or any other) certificate (Reddit)
2015-10-30 18:36

Google Gives Symantec Certificate Health Ultimatum (October 28, 2015) (SANS Newsbites)
2015-10-30 18:36

Google warns Symantec to take additional steps on certificate verification (SC Magazine)
2015-10-29 22:36

An End-to-End Measurement of Certificate Revocation in the Webs PKI PDF (Reddit)
2015-10-29 17:36

Google Tells Symantec to Improve Digital Certificate Security (SecurityWeek)
2015-10-29 13:36

The Business Case for TLS Certificate Enterprise Key Management of Web Site Certificates Wrangling TLS Certificates on the Wild Web (SANS Reading Room)
2015-10-28 18:10

CipherScan vs Alexa top 1M sites. List of domains vulnerable to Logjam, that use DHE1024, RC2/4, SHA1/MD5 certificate fingerprints (many other filters too). Tools and dump included. (Reddit)
2015-10-24 19:35

Cobweb 'fesses up to failure to renew SSL certificate (The Register)
2015-10-23 13:35

Mozilla may reject SHA-1 certificates six months early (SC Magazine)
2015-10-22 18:51