Forged Certificates: Five Steps to Secure Your Enterprise
ThreatPost writes the high profile compromise of Comodo, a Certificate Authority (CA), has raised the specter of a security compromise in one of the Internet’s few security pillars: SSL (Secure Sockets Layer) encryption that secures a dizzying array of Internet- and Web based transactions. With news that forged SSL certificates had been issued for some of the Web’s top domains, enterprises are in the difficult position of having to cross their fingers by trusting certificates from a CA that has admitted to a serious security breach, or migrating their certificates to a new CA. ThreatPost goes on to cite five tips for securing an enterprise’s certificate infrastructure.
