Man In Middle Attacks-How reliable are Certificates
I came across this article on one of the groups on Business networking site. what I understand is they are talking about dummy certificates which are being issued by some of the certifiers without any validation.In this case apparently the person has got a certificate in the name of Mozilla. such certificates may give additional credibility to bogus sites. http://it.slashdot.org/article.pl?sid=08/12/23/0046258&goback=%2Ehom Text of message from the site "In a previous article I reported about Man-In-The-Middle (MITM) attacks and if they really happen. Unfortunately it does happen as some testimonials confirm. Now itâ(TM)s even easier because in the attack described previously, untrusted certificates from an unknown issuer were used. Want to make the attack perfect with no error and fully trusted certificate? No problem, just head over to one of Comodoâ(TM)s resellers. In an unrelated event which was briefly mentioned at the dev.tech.crypto mailing list of Mozilla, something st...