NNSquad - Network Neutrality Squad
[ NNSquad ] Google: Improving SSL certificate security
Google: Improving SSL certificate security
http://j.mp/qPnlTw (Google Online Security Blog)
"In the wake of the recent Comodo fraud incident, there has been a
great deal of speculation about how to improve the public key
infrastructure, on which the security of the Internet rests.
Unfortunately, this isn't a problem that will be fixed overnight.
Luckily, however, experts have long known about these issues and have
been devising solutions for some time. Given the current interest it
seems like a good time to talk about two projects in which Google is
engaged."
- - -
The Google Certificate Catalog is a great idea. On the other hand, I
expressed my concerns regarding the DANE concept last June, in "DNS +
DANE = Dumb, Dumber, Disaster - Or - How to Wreck Secure Internet
Communications" - http://j.mp/metekH (Lauren's Blog). [Don't hold
back -- how do you *really* feel about DANE, Lauren?]
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
- PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren
Twitter: https://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com