[Linux-Biella] DigiNotar compromessa!!!

[Cristiano Deana]

2011/9/8 Daniele Segato <daniele.bilug a gmail.com>:

> si questo discorso mi era chiaro
>
> ma senza aver accesso ai DNS (fraudolento o meno) il pericolo si riduce
> molto :)

http://www.h-online.com/security/news/item/DigiNotar-breach-due-to-disastrous-security-Update-1337573.html

"Monitoring of OCSP traffic for the bogus *.google.com certificate
confirmed the attack was centred around Iran with 99% of the traffic
coming from the area. A separate analysis by TrendMicro noted that
over 40 different networks belonging to ISPs or universities in Iran
were subject to the man-in-the-middle attack. It is unlikely that an
attack of that scale could take place without some government
assistance."