Comodo accused... shipping malware worse than Superfish

[Wingman]

Comodo accused of shipping adware that’s worse than Superfish, breaks HTTPS security
siliconangle.com/blog/2015/02/22/comodo-accused-of-shipping-adware-thats-worse-than-superfish-breaks-https-security/

Johannes Bock claims on his blog that Privdog does something that’s worse than Superfish: it breaks HTTPS by allowing through any sort of certificate, signed or not. In his words:

While Superfish uses the same certificate and key on all hosts PrivDog recreates a key/cert on every installation. However here comes the big flaw: PrivDog will intercept every certificate and replace it with one signed by its root key. And that means also certificates that weren’t valid in the first place. It will turn your Browser into one that just accepts every HTTPS certificate out there, whether it’s been signed by a certificate authority or not.

Additional articles:
www.theregister.co.uk/2015/02/24/comodo_ssl_privdog/

Test to see if your vulnerable:
filippo.io/Badfish/