Daily Archives
April 5, 2011 - ActivMail

The Comodo issue, which was stolen 9 numeric certificates of popular domains, motivates Google to strengthen the safety of its numeric certificates.

Google wants to protect itself from safety risks when it comes to the SSL certificates, the usurpation of which can deceive the user who nevertheless made sure of the authenticity of the site which he visits thanks to this «numeric passport “. The Comodo issue, the American supplier of numeric certificates shows it. Comodo was stolen 9 SSL certificates for domains in touch with Microsoft, Google, Yahoo, Mozilla or Skype. Google thus decided to strengthen the integrity of its Secure Sockets Layer certificates.

On the Google blog Online Security, Ben Laurie, chief engineer to Google, reveals two new projects intended in particular to avoid future incidents concerning the management of his numeric certificates. Google is ready to establish so an on-line catalog for SSL certificates. Ben Laurie explains that Google is going to use its software of Web exploration to examine sites and collect certain number of information on their certificates of safety.

Google plans then to integrate this information to the Google Certificate Catalog, a database of SSL certificates for the connections, allowing verifying the authenticity of the numeric certificates. Google also plans to collaborate with the workgroup DNS-based authentification of Names Entries (DANE), who elaborates a platform allowing to specify and to validate the signature of SSL certificates.

What a SSL certificate is HERE

The Comodo issue, which was stolen 9 numeric certificates of popular domains, motivates Google to strengthen the safety of its numeric certificates.

Google wants to protect itself from safety risks when it comes to the SSL certificates, the usurpation of which can deceive the user who nevertheless made sure of the authenticity of the site which he visits thanks to this «numeric passport “. The Comodo issue, the American supplier of numeric certificates shows it. Comodo was stolen 9 SSL certificates for domains in touch with Microsoft, Google, Yahoo, Mozilla or Skype. Google thus decided to strengthen the integrity of its Secure Sockets Layer certificates.

On the Google blog Online Security, Ben Laurie, chief engineer to Google, reveals two new projects intended in particular to avoid future incidents concerning the management of his numeric certificates. Google is ready to establish so an on-line catalog for SSL certificates. Ben Laurie explains that Google is going to use its software of Web exploration to examine sites and collect certain number of information on their certificates of safety.

Google plans then to integrate this information to the Google Certificate Catalog, a database of SSL certificates for the connections, allowing verifying the authenticity of the numeric certificates. Google also plans to collaborate with the workgroup DNS-based authentification of Names Entries (DANE), who elaborates a platform allowing to specify and to validate the signature of SSL certificates.

What a SSL certificate is HERE

The SSL certificate Secure Socket Layer is a file which is settled down on an Internet server. This certificate has for purpose to secure the sending of some (or of all) the data of the server. This security is made by a more or less important encoding, but generally, for web sites, the level of encoding is 128 bits, what insures a level of confidentiality and a difficulty to break the certificate rather important. This certificate does not insure against the interception of the coded data, but insures an effective protection.

The SSL certificate was invented by Netscape in 1994 in association with some companies as MasterCard or the Bank of America. THE IETF bought the certificate from Netscape in 2001.

Four objectives of security are looked for the use of the certificate:

-The authentification of the Internet server which passes on the data: needs to    assure that it is a site, and not another one, which emits the certificate;

– The confidentiality of the passed on and exchanged information;

– The integrity of the exchanged data: the certificate must be rather “powerful” to avoid the passed on data to be altered.

-Last optional stage: the authentification of the customer: to insure that the data were well passed on by the Internet user who made the request.

The SSL certificate Secure Socket Layer is a file which is settled down on an Internet server. This certificate has for purpose to secure the sending of some (or of all) the data of the server. This security is made by a more or less important encoding, but generally, for web sites, the level of encoding is 128 bits, what insures a level of confidentiality and a difficulty to break the certificate rather important. This certificate does not insure against the interception of the coded data, but insures an effective protection.

The SSL certificate was invented by Netscape in 1994 in association with some companies as MasterCard or the Bank of America. THE IETF bought the certificate from Netscape in 2001.

Four objectives of security are looked for the use of the certificate:

-The authentification of the Internet server which passes on the data: needs to    assure that it is a site, and not another one, which emits the certificate;

– The confidentiality of the passed on and exchanged information;

– The integrity of the exchanged data: the certificate must be rather “powerful” to avoid the passed on data to be altered.

-Last optional stage: the authentification of the customer: to insure that the data were well passed on by the Internet user who made the request.

L’affaire Comodo, qui s’est fait dérober 9 certificats numériques de domaines populaires, motive Google à renforcer La sécurité de ses certificats numériques.

Google veut se prémunir des risques de sécurité liés aux certificats SSL dont l’usurpation peut tromper l’utilisateur qui s’est pourtant assuré de l’authenticité du site qu’il visite grâce à ce « passeport numérique ». En témoigne l’affaire Comodo, nom du fournisseur américain de certificats numériques, qui s’est fait dérober 9 certificats SSL pour les domaines touchant Microsoft, Google, Yahoo, Mozilla ou encore Skype. Google a donc décidé de renforcer l’intégrité de ses certificats Secure Sockets Layer.

Sur le blog Google Online Security, Ben Laurie, ingénieur en chef chez Google, dévoile deux nouveaux projets destinés notamment à éviter de futurs incidents concernant la gestion de ses certificats numériques. Google compte ainsi établir un catalogue en ligne pour les certificats SSL. Ben Laurie explique que Google va utiliser son logiciel d’exploration Web pour examiner des sites et recueillir un certain nombre d’informations sur leurs certificats de sécurité.

Google prévoit ensuite d’intégrer ces informations au Google Certificate Catalog, une base de données des certificats SSL pour les connexions, permettant de vérifier l’authenticité les données des certificats numériques. Il compte également collaborer avec le groupe de travail DNS-based Authentification of Names Entries (DANE), qui élabore une plate-forme permettant de spécifier et de valider la signature des certificats SSL.

Qu’est ce qu’un certificat SSL ICI

L’affaire Comodo, qui s’est fait dérober 9 certificats numériques de domaines populaires, motive Google à renforcer La sécurité de ses certificats numériques.

Google veut se prémunir des risques de sécurité liés aux certificats SSL dont l’usurpation peut tromper l’utilisateur qui s’est pourtant assuré de l’authenticité du site qu’il visite grâce à ce « passeport numérique ». En témoigne l’affaire Comodo, nom du fournisseur américain de certificats numériques, qui s’est fait dérober 9 certificats SSL pour les domaines touchant Microsoft, Google, Yahoo, Mozilla ou encore Skype. Google a donc décidé de renforcer l’intégrité de ses certificats Secure Sockets Layer.

Sur le blog Google Online Security, Ben Laurie, ingénieur en chef chez Google, dévoile deux nouveaux projets destinés notamment à éviter de futurs incidents concernant la gestion de ses certificats numériques. Google compte ainsi établir un catalogue en ligne pour les certificats SSL. Ben Laurie explique que Google va utiliser son logiciel d’exploration Web pour examiner des sites et recueillir un certain nombre d’informations sur leurs certificats de sécurité.

Google prévoit ensuite d’intégrer ces informations au Google Certificate Catalog, une base de données des certificats SSL pour les connexions, permettant de vérifier l’authenticité les données des certificats numériques. Il compte également collaborer avec le groupe de travail DNS-based Authentification of Names Entries (DANE), qui élabore une plate-forme permettant de spécifier et de valider la signature des certificats SSL.

Qu’est ce qu’un certificat SSL ICI