Linux Today: Linux News On Internet Time.

MD5 Considered Harmful (and what that means to you)

Jan 02, 2009, 20:03 (7 Talkback[s])

"Yesterday a presentation was given at the Chaos Communication Congress that exposed a flaw in the way SSL certificates are handed out. In their presentation they explained that this icon, in some cases, can be completely spoofed. When you combine this with the fact that people can ALSO spoof your domain name you have the potential to have a banking Web site that looks and feels EXACTLY like your banking Web site (and even "validates" as your bank) that is...well...not your bank."

Complete Story

Related Stories: