Alert icon
We're changing our privacy policy. This stuff matters.  Learn more  Dismiss

Why Internet users cannot completely trust certifications

Loading...

Sign in or sign up now!
Alert icon
Upgrade to the latest Flash Player for improved playback performance. Upgrade now or more info.
1,662
Loading...
Alert icon
Sign in or sign up now!
Alert icon
Ratings have been disabled for this video.

Uploaded by on Apr 27, 2011

Recent events have highlighted that certification -- and the lack of accountability in signing files, code signing or SSL certificates -- have become a major security issue affecting the Internet. Watch F-Secure's Mikko Hyppönen, Chief Research Officer, and Sean Sullivan, Security Advisor, discussing on this topic.

Category:

Science & Technology

Tags:

License:

Standard YouTube License

Link to this comment:

Share to:
see all

All Comments (2)

Sign In or Sign Up now to post a comment!
  • Well, I have seen that trust-list in the browser before and it's too long.

    Ideally the user should have to build it based on information received via some other transport, like a "cert card" from the bank, google, e.t.c.

    But that's just in-practical, I somehow think they should follow the dns system in trust path. ".com" is signed with root, "somesite.com" is signed with ".com".

    But I do not think it would solve a lot, unless it can be done localized.

    Maybe SSL should be like PGP keys?

    Tricky.

Loading...

Alert icon
0 / 00Unsaved Playlist Return to active list
    1. Your queue is empty. Add videos to your queue using this button:
      or sign in to load a different list.
    Loading...Loading...Saving...
    • Clear all videos from this list
    • Learn more