Comments on: MD5 collision creates rogue Certificate Authority http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/ Gadgets, gear and computer hardware. Tue, 10 Nov 2009 02:01:55 -0500 hourly 1 By: Broken Trust « ThreatFire Research Blog http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-1121798 Broken Trust « ThreatFire Research Blog Tue, 27 Oct 2009 21:23:34 +0000 http://www.crunchgear.com/?p=61912#comment-1121798 [...] of the MD5 algorithm and its use by the Certificate Authorities is written up by Scott Merrill here.Unfortunately, Mr. Merrill makes the same lame excuse for the CA’s that most of the software [...] [...] of the MD5 algorithm and its use by the Certificate Authorities is written up by Scott Merrill here.Unfortunately, Mr. Merrill makes the same lame excuse for the CA’s that most of the software [...]

]]> By: مسلسل السجينه http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-1042929 مسلسل السجينه Wed, 24 Jun 2009 02:56:00 +0000 http://www.crunchgear.com/?p=61912#comment-1042929 And American Express’s online account management system is using an MD5 certificate. Way to go And American Express’s online account management system is using an MD5 certificate. Way to go

]]> By: Ataque ao algoritmo MD5 « Plata Consultoria http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-1012317 Ataque ao algoritmo MD5 « Plata Consultoria Sun, 26 Apr 2009 20:59:29 +0000 http://www.crunchgear.com/?p=61912#comment-1012317 [...] Clique aqui e lleia o que Scott Merrill escreveu sobre este assunto (texto em Inglês). [...] [...] Clique aqui e lleia o que Scott Merrill escreveu sobre este assunto (texto em Inglês). [...]

]]> By: Collisioni MD5: dalla teoria alla pratica « Qasba ¬ http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-1004816 Collisioni MD5: dalla teoria alla pratica « Qasba ¬ Thu, 09 Apr 2009 13:35:59 +0000 http://www.crunchgear.com/?p=61912#comment-1004816 [...] Merrill. “MD5 collision creates rogue Certificate Authority“, CrunchGear.com, 30-12-2008 (consultato il 18 febbraio [...] [...] Merrill. “MD5 collision creates rogue Certificate Authority“, CrunchGear.com, 30-12-2008 (consultato il 18 febbraio [...]

]]> By: Just when you thought it was safe… by Schierer Space http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-994646 Just when you thought it was safe… by Schierer Space Sat, 21 Mar 2009 15:14:24 +0000 http://www.crunchgear.com/?p=61912#comment-994646 [...] Although this is old news in the cryptography/security community, I find the topic interesting enough to spend a few minutes on. I got word of this issue from someone at work[1], who said basically “Did you hear that somebody cracked the MD5 algorithm for SSL using a hash collision and used it to sign a certificate?” [...] [...] Although this is old news in the cryptography/security community, I find the topic interesting enough to spend a few minutes on. I got word of this issue from someone at work[1], who said basically “Did you hear that somebody cracked the MD5 algorithm for SSL using a hash collision and used it to sign a certificate?” [...]

]]> By: the economy http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-983519 the economy Fri, 20 Feb 2009 03:10:05 +0000 http://www.crunchgear.com/?p=61912#comment-983519 agreed agreed

]]> By: us economy http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-983516 us economy Fri, 20 Feb 2009 03:08:15 +0000 http://www.crunchgear.com/?p=61912#comment-983516 Quality of writing is deteriorating. Can you please tell me why this matters, what I can/should do about it, before jumping into a poorly written technical explanation? Quality of writing is deteriorating. Can you please tell me why this matters, what I can/should do about it, before jumping into a poorly written technical explanation?

]]> By: Goldwing Guy http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-976893 Goldwing Guy Sun, 01 Feb 2009 14:12:19 +0000 http://www.crunchgear.com/?p=61912#comment-976893 I would think most people know what the green address bar is all about even if they don't know about the padlock. IMO the green address bar is just plain awesome. I would think most people know what the green address bar is all about even if they don’t know about the padlock. IMO the green address bar is just plain awesome.

]]> By: Around The Geek World - Jan 2009 http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-2/#comment-976455 Around The Geek World - Jan 2009 Fri, 30 Jan 2009 16:01:12 +0000 http://www.crunchgear.com/?p=61912#comment-976455 [...] MD5 collision creates rogue certification. - Using several Playstation 3 system, reseachers were able to create a bogus certificate that looks like a trusted CA. MD5 Hack Interesting, But Not Threatening [...] [...] MD5 collision creates rogue certification. – Using several Playstation 3 system, reseachers were able to create a bogus certificate that looks like a trusted CA. MD5 Hack Interesting, But Not Threatening [...]

]]> By: Security Justice » Blog Archive » Security Justice - Episode 9 http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-975815 Security Justice » Blog Archive » Security Justice - Episode 9 Wed, 28 Jan 2009 22:10:35 +0000 http://www.crunchgear.com/?p=61912#comment-975815 [...] MD5 and rouge CA’s.  200 Playstation 3’s were used not 200 Wii’s! [...] [...] MD5 and rouge CA’s.  200 Playstation 3’s were used not 200 Wii’s! [...]

]]> By: Brad Ackerman http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-972004 Brad Ackerman Mon, 19 Jan 2009 22:23:12 +0000 http://www.crunchgear.com/?p=61912#comment-972004 And American Express's online account management system is using an MD5 certificate. Way to go. And American Express’s online account management system is using an MD5 certificate. Way to go.

]]> By: The Weekly Spin 5-Spinning in the New Year - The Weekly Spin http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-966574 The Weekly Spin 5-Spinning in the New Year - The Weekly Spin Tue, 06 Jan 2009 02:01:31 +0000 http://www.crunchgear.com/?p=61912#comment-966574 [...] MD5 Certificate Cracked [...] [...] MD5 Certificate Cracked [...]

]]> By: The Weekly Spin 5- Spinning in the New Year - The Weekly Spin http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-966570 The Weekly Spin 5- Spinning in the New Year - The Weekly Spin Tue, 06 Jan 2009 01:55:44 +0000 http://www.crunchgear.com/?p=61912#comment-966570 [...] MD5 Certificate Cracked [...] [...] MD5 Certificate Cracked [...]

]]> By: Me http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-966356 Me Mon, 05 Jan 2009 18:54:24 +0000 http://www.crunchgear.com/?p=61912#comment-966356 EV stand for Extended Validation SSL. According to the CA Browser Forum, "Extended Validation SSL (EV SSL) Certificates build on the existing SSL certificate format, but provide an additional layer of protection in a strictly defined issuance process created to ensure that the certificate holder is who they claim to be." Read all about EV here: http://www.cabforum.org/ EV stand for Extended Validation SSL.

According to the CA Browser Forum,

“Extended Validation SSL (EV SSL) Certificates build on the existing SSL certificate format, but provide an additional layer of protection in a strictly defined issuance process created to ensure that the certificate holder is who they claim to be.”

Read all about EV here:
http://www.cabforum.org/

]]> By: מלחמת השרתים « לראות שונה http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-965686 מלחמת השרתים « לראות שונה Sun, 04 Jan 2009 08:36:16 +0000 http://www.crunchgear.com/?p=61912#comment-965686 [...] הפסיקו להשתמש ב md5 בכלל. ניתן ב”קלות” לזייף אותם. [...] [...] הפסיקו להשתמש ב md5 בכלל. ניתן ב”קלות” לזייף אותם. [...]

]]> By: MD5-CA crack « 0ddn1x: tricks with *nix http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-965296 MD5-CA crack « 0ddn1x: tricks with *nix Fri, 02 Jan 2009 23:17:03 +0000 http://www.crunchgear.com/?p=61912#comment-965296 [...] MD5-CA crack Filed under: News, Security — 0ddn1x @ 2009-01-02 23:16:57 +0000 http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/ [...] [...] MD5-CA crack Filed under: News, Security — 0ddn1x @ 2009-01-02 23:16:57 +0000 http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/ [...]

]]> By: Logran hackear el algoritmo MD5 » Consultorio del Dr. Ogalinski http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-965295 Logran hackear el algoritmo MD5 » Consultorio del Dr. Ogalinski Fri, 02 Jan 2009 23:14:50 +0000 http://www.crunchgear.com/?p=61912#comment-965295 [...] Fuente: InfoWorld, CrunchGear [...] [...] Fuente: InfoWorld, CrunchGear [...]

]]> By: CA Exploit Update: Falling Sky Averted http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-965113 CA Exploit Update: Falling Sky Averted Fri, 02 Jan 2009 16:11:30 +0000 http://www.crunchgear.com/?p=61912#comment-965113 [...] MD5 collision creates rogue Certificate Authority [...] [...] MD5 collision creates rogue Certificate Authority [...]

]]> By: News Update: 2009-01-02 00:48:00 « Universal Computer Network Infiltration Material http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-965003 News Update: 2009-01-02 00:48:00 « Universal Computer Network Infiltration Material Fri, 02 Jan 2009 07:49:34 +0000 http://www.crunchgear.com/?p=61912#comment-965003 [...] MD5 collision creates rogue Certificate Authority - CrunchGear.com [...] [...] MD5 collision creates rogue Certificate Authority – CrunchGear.com [...]

]]> By: Twitter: Frequently cited URLs, Part 2 | Measuring Social Media http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/comment-page-1/#comment-964891 Twitter: Frequently cited URLs, Part 2 | Measuring Social Media Thu, 01 Jan 2009 22:57:01 +0000 http://www.crunchgear.com/?p=61912#comment-964891 [...] 4 URL(s), 56 users: http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/ [...] [...] 4 URL(s), 56 users: http://www.crunchgear.com/2008/12/30/md5-collision-creates-rogue-certificate-authority/ [...]

]]>