This is big

[turgid]

http://www.win.tue.nl/hashclash/rogue-ca/

The key words:

As a proof of concept we executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted by all common web browsers.So, yeah, SSL is pretty busted right now; it'll take a lot of work on the CA's part to fix this...

Comments

[llarian]

Yikes. That is huge...

[3ricj]

nah, ssl has been broken for years.

[3ricj]

this is very old news.

[turgid]

Sure, that this is possible has been known for a while. But this is the first time someone's made a cookbook, followed the recipe, and showed everyone how tasty the pie is.

-Jon

[llarian]

I like pie