Vulnerable CA Certificate Check Tool
Short after the publication that several Certificate Authorities are using a weak signature algorithm for signing purposes Networking4all -- the largest SSL reseller in the Benelux -- announces a tool to check if your certificate is affected by an insecure signature somewhere in the certificate chain.
A web browser displays a tiny image of a padlock when a user has a secure connection to a web site. This is intended to provide evidence that the Web site is legitimate, as the browser and the site exchange digital certificates provided by a Certificate Authority -- a trusted third party.
This team of computer security researchers have proven they can create fake certificates that will be accepted by the security system.
You can check if a certificate in the chain has been signed with a insecure algorithm using the Vulnerable CA Check tool provided by Networking4all.
Example:
http://www.networking4all.com/en/support/tools/site+check/?fqdn=www.verisign.com
You can check all sites on:
http://www.networking4all.com/en/support/tools/site+check/



del.icio.us
Digg
Technorati
Comments (0 posted):
Post your comment