[ NNSquad ] Mozilla will ask all certificate authorities to revoke SSL-spying certificates

[Lauren Weinstein <lauren@vortex.com>]

Mozilla will ask all certificate authorities to revoke SSL-spying certificates

http://j.mp/AoUmI5  (Network World)

   "Mozilla plans to ask all certificate authorities to review their
    subordinate CA certificates and revoke those that could be used by
    companies to inspect SSL-encrypted traffic for domain names they don't
    control.  The plan, whose details are still being worked out, is
    Mozilla's response to Trustwave's recent claim that the use of such
    certificates for SSL (Secure Sockets Layer) traffic management within
    corporate networks is a common practice."

 - - -

If it wasn't obvious before, it should be obvious now that the
existing certificate-based PKI is in serious trouble.

--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren 
Co-Founder: People For Internet Responsibility: http://www.pfir.org 
Founder:
 - Data Wisdom Explorers League: http://www.dwel.org
 - Network Neutrality Squad: http://www.nnsquad.org 
 - Global Coalition for Transparent Internet Performance: http://www.gctip.org
 - PRIVACY Forum: http://www.vortex.com 
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren 
Tel: +1 (818) 225-2800 / Skype: vortex.com

_______________________________________________
nnsquad mailing list
http://lists.nnsquad.org/mailman/listinfo/nnsquad