, 2009-01-05
A few days ago at the Chaos Communication Congress in Berlin, researchers presented a paper in which they had used an MD5 collision attack and substantial computing firepower to create a false SSL certificate using the RapidSSL brand of SSL certificate. In the intervening time we have seen a great deal of confusion and misinformation in the press and blogosphere about the specifics of this attack and what it means to the online ecosystem.
Charles Hunter
Sorry for the late reply. To answer your question, I found the column directly from the main page.
As one other person noted in this thread, I wasn't confused that this was a columnist, I was annoyed that the person's role/background/influece wasn't disclosed up front.
Like I said,...
[ more ]