[liberationtech] Another CA Compromise: TurkTrust

[Ralph Holz]

On 01/04/2013 02:45 AM, Amin Sabeti wrote:
> One point: Most of the Iranian banks have bought SSL certification from
> TurkTrust. 

Indeed. And one of the solutions that Mozilla is considering is to limit
Turktrust do .tr and .ir, by using the name extension in X.509.

Ralph

-- 
Ralph Holz
Network Architectures and Services
Technische Universität München
Phone +49 89 28918043
http://www.net.in.tum.de/de/mitarbeiter/holz/
PGP: A805 D19C E23E 6BBB E0C4  86DC 520E 0C83 69B0 03EF