[keyassure] Mis-issued certs for Google / Yahoo / Skype, etc.

Warren Kumari <warren@kumari.net> Thu, 24 March 2011 08:16 UTC

Return-Path: <warren@kumari.net>
X-Original-To: keyassure@core3.amsl.com
Delivered-To: keyassure@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D9C873A682C for <keyassure@core3.amsl.com>; Thu, 24 Mar 2011 01:16:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level:
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mO+RcQQfNkIg for <keyassure@core3.amsl.com>; Thu, 24 Mar 2011 01:16:19 -0700 (PDT)
Received: from vimes.kumari.net (vimes.kumari.net [198.186.192.250]) by core3.amsl.com (Postfix) with ESMTP id D52483A67CF for <keyassure@ietf.org>; Thu, 24 Mar 2011 01:16:19 -0700 (PDT)
Received: from [10.67.11.182] (unknown [212.47.23.197]) by vimes.kumari.net (Postfix) with ESMTPSA id B17431B401D8 for <keyassure@ietf.org>; Thu, 24 Mar 2011 04:17:53 -0400 (EDT)
From: Warren Kumari <warren@kumari.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 24 Mar 2011 09:17:56 +0100
Message-Id: <A353A62B-E386-44CF-A740-C49CCE9133B5@kumari.net>
To: keyassure@ietf.org
Mime-Version: 1.0 (Apple Message framework v1082)
X-Mailer: Apple Mail (2.1082)
Subject: [keyassure] Mis-issued certs for Google / Yahoo / Skype, etc.
X-BeenThere: keyassure@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: Key Assurance With DNSSEC <keyassure.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/keyassure>, <mailto:keyassure-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/keyassure>
List-Post: <mailto:keyassure@ietf.org>
List-Help: <mailto:keyassure-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/keyassure>, <mailto:keyassure-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Mar 2011 08:16:20 -0000

I'm assuming everyone has already seen this, but on the off-chance that you haven't:

http://threatpost.com/en_us/blogs/phony-web-certificates-issued-google-yahoo-skype-others-032311#

Being able to state "That ain't my cert" is one of the drivers for this work....

W