I published the following diary on isc.sans.org: “Keep An Eye on your Root Certificates“.
A few times a year, we can read in the news that a rogue root certificate was installed without the user consent. The latest story that pops up in my mind is the Savitech audio drivers which silently installs a root certificate. The risks associated with this kind of behaviour are multiple, the most important remains performing MitM attacks. New root certificates are not always the result of an attack or infection by a malware. Corporate end-points might also get new root certificates… [Read more]
[The post [SANS ISC] Keep An Eye on your Root Certificates has been first published on /dev/random]
from Xavier
No comments:
Post a Comment