[2902] in Privacy_Forum
[ PRIVACY Forum ] Microsoft overhauls certificate management in
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Tue Jun 12 14:54:02 2012
Date: Tue, 12 Jun 2012 11:38:14 -0700
To: privacy-list@vortex.com
Message-ID: <20120612183814.GD19084@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Microsoft overhauls certificate management in response to Flame PKI hack
http://j.mp/LigPyd (ars technica)
According to a post on the Microsoft Security Response Center blog by
Microsoft Trustworthy Computing spokesperson Angela Gunn, the new
certificate update tool will rely on a "Disallowed Certificate Trust
List" maintained by Microsoft. The tool will check the list daily,
moving certificates found on the list to an "untrusted" store. In the
past, moving certificates to untrusted status required manually
updating them.
Microsoft also gave advance warning of an update to how Windows
manages certificates that will blanket invalidate certificates that
don't have adequate security. Certificates with RSA encryption keys of
less than 1024 bits will automatically be marked as invalid. "Once
this key length update is released, we will treat all of these
certificates as invalid, even if they are currently valid and signed
by a trusted certificate authority," Gunn wrote.
- - -
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
- Data Wisdom Explorers League: http://www.dwel.org
- Network Neutrality Squad: http://www.nnsquad.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
- PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
