Security-X

Forum Security-X => Sécurité Générale => Discussion démarrée par: igor51 le décembre 08, 2013, 10:20:30

Titre: Further improving digital certificate security
Posté par: igor51 le décembre 08, 2013, 10:20:30

http://googleonlinesecurity.blogspot.fr/2013/12/further-improving-digital-certificate.html

Citer

Late on December 3rd, we became aware of unauthorized digital certificates for several Google domains. We investigated immediately and found the certificate was issued by an intermediate certificate authority (CA) linking back to ANSSI, a French certificate authority. Intermediate CA certificates carry the full authority of the CA, so anyone who has one can use it to create a certificate for any website they wish to impersonate.

Titre: Re : Further improving digital certificate security
Posté par: Chapitre23 le décembre 08, 2013, 17:03:08

 :AAC

Une explication dans la langue de Molière pour les non Shakespearien

http://www.lemonde.fr/technologies/article/2013/12/08/google-bloque-des-certificats-de-securite-internet-emis-par-une-autorite-francaise_3527535_651865.htmlhttp://www.lemonde.fr/technologies/article/2013/12/08/google-bloque-des-certificats-de-securite-internet-emis-par-une-autorite-francaise_3527535_651865.html (http://www.lemonde.fr/technologies/article/2013/12/08/google-bloque-des-certificats-de-securite-internet-emis-par-une-autorite-francaise_3527535_651865.html)

Edit :

L'explication de texte de Reflets

http://reflets.info/mitm-de-google-par-l-anssi-la-theorie-du-doigt-qui-pointait-la-lune/