Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate

We are simply not vigilant enough.  This issue has been on our plate
since 2004.

SHA-1 is next and neither the client side vendors nor the big
Enterprises have pushed to move to SHA-256.


There is a simple fix -- a CA can just reorder the extensions prior
to issuing a certificate.

Mike

<Prev in Thread]	Current Thread	[Next in Thread>
Re: Further MD5 breaks: Creating a rogue CA certificate, (continued) Re: Further MD5 breaks: Creating a rogue CA certificate, Russ Housley Re: [saag] Further MD5 breaks: Creating a rogue CA certificate, Paul Hoffman Re: [saag] Further MD5 breaks: Creating a rogue CA certificate, RL 'Bob' Morgan RE: [saag] Further MD5 breaks: Creating a rogue CA certificate, Peter Hesse RE: [saag] Further MD5 breaks: Creating a rogue CA certificate, Santosh Chokhani Message not available Re: [saag] Further MD5 breaks: Creating a rogue CA certificate, Jeffrey Hutzelman RE: [saag] Further MD5 breaks: Creating a rogue CA certificate, Peter Gutmann RE: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Santosh Chokhani Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Timothy J. Miller RE: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Santosh Chokhani Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Mike <= Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Mike RE: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Santosh Chokhani Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Timothy J. Miller Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Dr Stephen Henson RE: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Santosh Chokhani Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Timothy J. Miller RE: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Santosh Chokhani Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Timothy J. Miller RE: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Santosh Chokhani Re: [Cfrg] [saag] Further MD5 breaks: Creating a rogue CAcertificate, Timothy J. Miller