Bugtraq mailing list archives
Re: New whitepaper "The Phishing Guide"
From: Aleksandar Milivojevic <amilivojevic () pbl ca>
Date: Mon, 27 Sep 2004 10:39:27 -0500
Seth Arnold wrote:
http://www.internetnews.com/dev-news/article.php/721571 Even the best-known X.509 Certification Agency has made screwups regarding one of the best-known publicly traded corporations. How hard do you think it would be to get certificates for something that sounds plausibly like a bank? Credit card company?
I totally agree with what you (and others) wrote. Most of the current registrars fall from the sky some time ago, telling us that they are "trusted" entities (yeah right). Even without that incident you mentioned, would you trust company whose bussiness practices include hijacking of DNS name space (scandal with wildcard .com and .net entries) or sending deceptive domain renewals via mail? Probably not.
My point was that currently corporations are not even attempting to use the tools they have available. It is more important to them that message is nicely HTML formated, than putting even basic security precausins (such as signing with x509 certificate).
-- Aleksandar Milivojevic <amilivojevic () pbl ca> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
Current thread:
- New whitepaper "The Phishing Guide" Gunter Ollmann (NGS) (Sep 22)
- Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic (Sep 23)
- Re: New whitepaper "The Phishing Guide" Seth Arnold (Sep 24)
- Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic (Sep 27)
- Re: New whitepaper "The Phishing Guide" Greg A. Woods (Sep 27)
- Re: New whitepaper "The Phishing Guide" Crispin Cowan (Sep 28)
- Re: New whitepaper "The Phishing Guide" Seth Arnold (Sep 24)
- Re: New whitepaper "The Phishing Guide" Daniel Veditz (Sep 26)
- Re: New whitepaper "The Phishing Guide" Chip Andrews (Sep 27)
- Re: New whitepaper "The Phishing Guide" Philip Stoev (Sep 29)
- Re: New whitepaper "The Phishing Guide" Juraj Bednar (Sep 28)
- Re: New whitepaper "The Phishing Guide" Brian Dessent (Sep 28)
- Re: New whitepaper "The Phishing Guide" Aleksandar Milivojevic (Sep 23)
- Re[2]: New whitepaper "The Phishing Guide" Karsten Heidrich (Sep 28)
- <Possible follow-ups>
- RE: New whitepaper "The Phishing Guide" Dehner, Benjamin T. (Sep 25)