mis-issuance – Experimental News Clipping Site

The Register: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

Apr 22, 2025

—

by

Source URL: https://www.theregister.com/2025/04/22/ssl_com_validation_flaw/ Source: The Register Title: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps Feedly Summary: 10 other certificates ‘were mis-issued and have now been revoked’ Certificate issuer SSL.com’s domain validation system had an unfortunate bug that was exploited by miscreants to obtain, without authorization, digital certs for…

The Cloudflare Blog: A next-generation Certificate Transparency log built on Cloudflare Workers

Apr 11, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://blog.cloudflare.com/azul-certificate-transparency-log/ Source: The Cloudflare Blog Title: A next-generation Certificate Transparency log built on Cloudflare Workers Feedly Summary: Learn about recent developments in Certificate Transparency (CT), and how we built a next-generation CT log on top of Cloudflare’s Developer Platform. AI Summary and Description: Yes **Summary:** The text provides a comprehensive overview of Certificate…

Slashdot: HTTPS Certificate Industry Adopts New Security Requirements

Mar 31, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://it.slashdot.org/story/25/03/31/0529220/https-certificate-industry-adopts-new-security-requirements?utm_source=rss1.0mainlinkanon&utm_medium=feed Source: Slashdot Title: HTTPS Certificate Industry Adopts New Security Requirements Feedly Summary: AI Summary and Description: Yes Summary: The text discusses recent advancements and requirements from the CA/Browser Forum concerning TLS certificate issuance, highlighting the necessity for improved security practices such as Multi-Perspective Issuance Corroboration (MPIC) and linting. These changes aim to…

Google Online Security Blog: New security requirements adopted by HTTPS certificate industry

Mar 27, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: http://security.googleblog.com/2025/03/new-security-requirements-adopted-by.html Source: Google Online Security Blog Title: New security requirements adopted by HTTPS certificate industry Feedly Summary: AI Summary and Description: Yes Summary: The text discusses the Chrome Root Program, detailing initiatives aimed at enhancing the security of TLS connections and the Web PKI ecosystem. Key developments include the adoption of Multi-Perspective Issuance…

Tag: mis-issuance

The Register: Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

The Cloudflare Blog: A next-generation Certificate Transparency log built on Cloudflare Workers

Slashdot: HTTPS Certificate Industry Adopts New Security Requirements

Google Online Security Blog: New security requirements adopted by HTTPS certificate industry