Crypto certificates impersonating Google/Yahoo pose threat
Jul 10, 2014 16:00:00 GMT -5
Post by quietman7 on Jul 10, 2014 16:00:00 GMT -5
Crypto certificates impersonating Google and Yahoo pose threat to Windows users
Microsoft Security Advisory 2982792: Improperly Issued Digital Certificates Could Allow Spoofing
People using Internet Explorer and possibly other Windows applications could be at risk of attacks that abuse counterfeit encryption certificates recently discovered masquerading as legitimate credentials for Google, Yahoo, and possibly an unlimited number of other Internet properties.
...The result is that IE and other apps that rely on Windows to know which certificates to trust have no reliable way of detecting the bogus credentials at the moment. Worse still, at this early stage in the investigation, there's no way of knowing just how many certificates were fraudulently issued...
...The result is that IE and other apps that rely on Windows to know which certificates to trust have no reliable way of detecting the bogus credentials at the moment. Worse still, at this early stage in the investigation, there's no way of knowing just how many certificates were fraudulently issued...
Microsoft Security Advisory 2982792: Improperly Issued Digital Certificates Could Allow Spoofing