, 2009-01-05
A few days ago at the Chaos Communication Congress in Berlin, researchers presented a paper in which they had used an MD5 collision attack and substantial computing firepower to create a false SSL certificate using the RapidSSL brand of SSL certificate. In the intervening time we have seen a great deal of confusion and misinformation in the press and blogosphere about the specifics of this attack and what it means to the online ecosystem.
Robert Lemos
Can you let us know how you found the VeriSign column? We try to make sure that any distribution channel marks these pieces as a column or opinion piece to stress that they are opinions.
If you came via the SecurityFocus front page, the "article" as you call it, is clearly labeled...
[ more ]