Language Selection

English French German Italian Portuguese Spanish

Dutch CA banished for life from Chrome, Firefox

Filed under
Software
Moz/FF

The network breach in July that forged a near-perfect replica of a Google.com credential minted more than 200 other SSL certificates for more than 20 different domains, a top manager for Mozilla's Firefox browser said.

In stern rebuke of substandard practices at Netherlands-based certificate authority DigiNotar, Director of Firefox Engineering Johnathan Nightingale recited a litany of failures that put entire internet populations at risk. Bad enough was DigiNotar's inability to accurately account for the certificates it issued, and its six-week delay in warning Mozilla of fraudulent certificates detected in mid July, one of which spoofed the sensitive https://addons.mozilla.org site.

Worse yet was the determination that DigiNotar's lapses resulted in “multiple reports of these certificates being used in the wild.”

rest here




More in Tux Machines

Server: NASA, Kubernetes at GitHub, and Docker in Mainframes

  • NASA Launches Supercomputer Servers into Space
    During that time, it will run a series of supercomputing benchmarks, including High Performance Linpack, the High Performance Conjugate Gradients (HPCG) suite, and the NASA-derived NAS parallel benchmarks. Its operation will be compared to HPE servers of the same construction back on Earth. The idea is to make sure that the ISS-based system is able to deal with the realities of cosmic radiation, solar flares, unstable electrical power, and wide variations in temperature.
  • Kubernetes at GitHub
    Over the last year, GitHub has gradually evolved the infrastructure that runs the Ruby on Rails application responsible for github.com and api.github.com. We reached a big milestone recently: all web and API requests are served by containers running in Kubernetes clusters deployed on our metal cloud. Moving a critical application to Kubernetes was a fun challenge, and we’re excited to share some of what we’ve learned with you today.
  • Docker Can Now Containerize Legacy Apps Running on Mainframes
    Docker this week announced the first update to its rebranded flagship platform with the release of Docker Enterprise Edition (EE) 17.06. Back in March, Docker rolled out the first Docker EE, built on the backs of what had been known as Docker Commercially Supported and Docker Datacenter. The new release comes on the heels of a report last week from Bloomberg that the container company has been raising money, which will result in $75 million dollars being added to its coffers by the end of the month, bringing with it a new valuation of $1.3 billion — up $300 million from its previous valuation.

Linux Foundation's Dronecode, Ethereum Blockchain, and Kernel Changes

today's howtos

Games: Out of Reach, Darkwood and F1 2017