Fantastic, people are starting to wake up and smell the coffee.

My hobby for a while has been getting PKI vendors to admit that the product they sell is unecessary to a legally secure enterprise if proper legal and procedural steps are performed.

SSL is a useful tool, but the awareness that surrounds it and the implementation of controls that make it secure are not being practiced widely (i.e. revocation checking and identity checking on issue).

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/60/10504#10504