<<<
Chronological Index
>>> <<<
Thread Index
>>>
Concur with Ian&Adam
- To: net-rfp-verisign@xxxxxxxxx
- Subject: Concur with Ian&Adam
- From: Jason Holt <jason@xxxxxxxxxxxx>
- Date: Thu, 3 Feb 2005 04:11:56 +0000 (UTC)
I concur with Ian Grigg and Adam Shostack regarding VeriSign's conflict of
interest. The domain name system and SSL's certificate facilities are the
only assurances web users have that their traffic is secure; allowing VeriSign
control over DNS when it already has a large market share of the certificate
market creates a liability and a temptation for VeriSign and provides a single
target (business-wise, at least) for attack which, when compromised, exposes
millions of users.
Jason Holt, Security Researcher
<<<
Chronological Index
>>> <<<
Thread Index
>>>
|