Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
Mozilla has removed a deserted root certificate authority from its Firefox web browser after initially being unable to determine its current owner.The root in question was added by RSA several years ago, but when Mozilla recently contacted the company "to confirm current contact and audit information" for the root, RSA was unable to offer details about the status of the root, Johnathan Nightingale, director of Firefox Development, said in a blog post.This prompted some worries among Mozilla developers, who said that VeriSign also could not take ownership of the root. Root certificates are critical parts of browsers, as they are used to sign, or validate, the authenticity of other certificates, such SSL connections used to secure website communications."We expect every root in our program to have a clear and active owner, and failing to get that clarity from RSA, we moved to pull this root from the product," Nightingale said. "RSA has since confirmed that this root is no longer needed and can be removed from the product. That clarity, while late, is welcome and confirms our original decision...We regularly check for roots whose audits have lapsed or for whom we don't have an up-to-date point of contact — it's part of keeping our root program healthy."The root certificate, RSA Security 1024 V3, also appears in Apple's root store. A spokesperson for the computing giant could not be reached for comment.See original article on scmagazineus.com
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.