«
»

MD5 Now Considered Harmful

Just a quick note to pass on the news that MD5 has been proven to be broken.

‘We have identified a vulnerability in the Internet Public Key Infrastructure (PKI) used to issue digital certificates for secure websites. As a proof of concept we executed a practical attack scenario and successfully created a rogue Certification Authority (CA) certificate trusted by all common web browsers. This certificate allows us to impersonate any website on the Internet, including banking and e-commerce sites secured using the HTTPS protocol.’

For more info, including links to acknowledgments by Verisign, Mozilla, Microsoft and the rest, read this MD5 Considered Harmful article.

Related posts:

  1. Internet ranges in new domains Internet ranges in new domains Almost without...
  2. blogtracker Read your favorite weblogs blogtracker Read your favorite weblogs your way,...
  3. The Book of Cliches The The Book of Cliches The Book of...

This entry was posted on Friday, January 2nd, 2009 at 10:53 pm and is filed under Info, News, Pass it on, Web. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.

Comments are closed.