Symantec CA 被“攻陷”了

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

For Existing Member Sign In

This topic created in 3198 days ago, the information mentioned may be changed or developed.

研究人员发现 Symantec CA 证书吊销流程存在漏洞，网络上发布的 SSL 证书与私钥验证方法错误百出：
https://blog.hboeck.de/archives/888-How-I-tricked-Symantec-with-a-Fake-Private-Key.html

Symantec 官方回应：
https://www.symantec.com/connect/blogs/third-party-revocation-updates

No Comments Yet