Experimental News Clipping Site

Tag: certificate validation

  • The Cloudflare Blog: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME)

    —

    by

    Kurt Seifried
    in

    Source URL: https://blog.cloudflare.com/vulnerability-disclosure-on-ssl-for-saas-v1-managed-cname/ Source: The Cloudflare Blog Title: Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME) Feedly Summary: An upcoming vulnerability disclosure in Cloudflare’s SSL for SaaSv1 is detailed, explaining the steps we’ve taken towards deprecation. AI Summary and Description: Yes Summary: The text discusses a vulnerability discovered in Cloudflare’s SSL for SaaS v1…

  • The Register: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.theregister.com/2025/04/22/ssl_com_validation_flaw/ Source: The Register Title: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps Feedly Summary: 10 other certificates ‘were mis-issued and have now been revoked’ Certificate issuer SSL.com’s domain validation system had an unfortunate bug that was exploited by miscreants to obtain, without authorization, digital certs for…

  • NCSC Feed: Provisioning and securing security certificates

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.ncsc.gov.uk/guidance/provisioning-and-securing-security-certificates Source: NCSC Feed Title: Provisioning and securing security certificates Feedly Summary: How certificates should be initially provisioned, and how supporting infrastructure should be securely operated. AI Summary and Description: Yes Summary: The text discusses the implementation and management of X.509v3 certificates and Public Key Infrastructure (PKI) necessary for securing communications in networks.…

  • Anchore: Syft 1.20: Faster Scans, Smarter License Detection, and Enhanced Bitnami Support

    —

    by

    Kurt Seifried
    in

    Source URL: https://anchore.com/blog/syft-1-20-faster-scans-smarter-license-detection-and-enhanced-bitnami-support/ Source: Anchore Title: Syft 1.20: Faster Scans, Smarter License Detection, and Enhanced Bitnami Support Feedly Summary: We’re excited to announce Syft v1.20.0! If you’re new to the community, Syft is Anchore’s open source software composition analysis (SCA) and SBOM generation tool that provides foundational support for software supply chain security for modern…

  • Hacker News: Disabling cert checks: we have not learned much

    —

    by

    Kurt Seifried
    in

    Source URL: https://daniel.haxx.se/blog/2025/02/11/disabling-cert-checks-we-have-not-learned-much/ Source: Hacker News Title: Disabling cert checks: we have not learned much Feedly Summary: Comments AI Summary and Description: Yes **Summary:** The text discusses the critical significance of certificate verification in SSL/TLS communication, particularly highlighting the history and evolution of the curl and libcurl libraries in handling SSL verification. It emphasizes the…

  • Bulletins: Vulnerability Summary for the Week of January 27, 2025

    —

    by

    Kurt Seifried
    in

    Source URL: https://www.cisa.gov/news-events/bulletins/sb25-034 Source: Bulletins Title: Vulnerability Summary for the Week of January 27, 2025 Feedly Summary: High Vulnerabilities PrimaryVendor — Product Description Published CVSS Score Source Info 0xPolygonZero–plonky2  Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always…