If the title makes someone a slight feeling of déjà vu, it is not surprising. In March 2016 the Israeli company StartCom, which owns StartSSL service and project StartEncrypt for issuance of free SSL-certificates to everyone, has suffered from a…
Blog Archives
Attackers can exploit the vulnerability in StartSSL for issuing SSL certificates
Recently, security experts have found a serious hole in the domain verification, which was discovered in the StartSSL. The detected vulnerability allows anyone to issue SSL-certificates for any domain without confirming ownership. StartSSL – a web-based service that allows webmasters…
This site is dedicated to SSL-certificates. You will learn what is an SSL certificate, how to issue and reissue it. FAQ SSL will be useful for both novices and pros. SSL Knowledgebase contains sections on validation, trust logo, vulnerabilities, SSL-certificates differences by type (Wildcard, EV, DV, etc.), as well as many other things.
Comments