Contents
Certificate authority compromises can have devastating impacts as forged or fraudulent certificates can allow attackers to perform man-in-the-middle (MiTM) attacks to eavesdrop on private communications. This meant that sites with Symantec’s certificates would no longer be accessible on Chrome.
What is rogue certificate?
Rogue certificates are valid certificates issued by a legitimate certificate authority (CA) which are nonetheless untrustworthy; yet trusted by web browsers and users. Rogue certificates from recent compromises have been trusted for as long as weeks before detection and revocation.
Can certificate be hacked?
Many of the potential attacks against an SSL certificate are either untenable because hacking technology has not caught up to security technology (for example, a brute force attempt to “crack” an ssl certificate would take years), or are relatively easy to protect against.
What is a rogue SSL connection attempt?
A rogue certificate is a legitimate, trusted certificate that has been issued by a trusted certificate authority but is either compromised or was issued to the wrong party. When a CA issues a certificate, it signs that certificate with one of its private keys.
Patrick Lambert looks at certificate authority hacks like the most recent DigiNotar exploit and suggests several ways to protect your organization from compromised CAs. Over the last couple of weeks, DigiNotar, a Dutch Certificate Authority, has been in the news following a breach back in July.
How does a certificate authority generate a certificate?
Then, they transmit that request to a trusted Certificate Authority (CA). That CA, or more often one of its subsidiaries, will then generate the signed certificate using its own private key, after verifying that you are authorized to have a certificate for that domain name.
Over the last couple of weeks, DigiNotar, a Dutch Certificate Authority, has been in the news following a breach back in July. This was a major story because it showed a real life example of a very serious security problem that could affect everyone online.
How are CA’s trusted in the certificate hierarchy?
In turn, their own certificate may be trusted by a higher CA, which in turn is trusted in all of the popular web browsers. That’s what’s called a Certificate Hierarchy. And that’s where the problem lies. There are hundreds of such trusted CAs in our browsers, and each of them can produce certificates for any website on the web.