Latest news, tutorials, and insights from the ssl category.
Update: we now host a test server at gnutls.notary.icsi.berkeley.edu. See gnutls command lines below. The recent GnuTLS certificate verification bug made it possible to craft an arbitrary certificate in a way that GnuTLS would validate correctly against…
read more about Dissecting the GnuTLS BugTurktrust, a Certificate Authority (CA) that is trusted by all major browsers and systems accidentally issued intermediate CA certificates instead of end-host certificates to two of its clients. Both of these intermediates were valid and signed…
read more about Searching the ICSI Notary for Rogue Turktrust Intermediate CertificatesAs we mentioned in our preceding blog posting, ICSI has been harvesting details about SSL connections and their contained certificates since the beginning of this year.We use the data to provide a notary service to the…
read more about The Tree of TrustToday, we are happy to publicly announce the ICSI Certificate Notary. This service provides near real-time reputation information on a large number of TLS/SSL certificates seen in the wild, collected continuously by Bro at several partner…
read more about Using the ICSI Certificate Notary