links for 2010-03-25

  • "Today, every purchase you make online, every ATM you use, every private email you send or receive — everything you do that has some element of privacy! — is legal because of Cindy's ability to convey nuanced technical arguments to nontechnical lawmakers." It's amazing how the right person can make such a difference. Cindy Cohn rocks.
  • This is not good. Basically, it comes down to: anybody can get an SSL certificate that says anything, and then you can use that for a man-in-the-middle attack. So… nothing on the Internet is secure anymore.

Comments on this entry are closed.

  • Yet another reason to, in high security environments, run your own CA and only trust certificates from it.