Matasano Chargen - Latest Comments in RSA Signature Forgery Explained (with Nate Lawson) - Part IV

Re: RSA Signature Forgery Explained (with Nate Lawson) - Part IV

Nate — Mon, 25 Sep 2006 15:41:48 -0000

Matt:

I'm unaware of any changes in the root certs. We won't know for another 3-6 months, my guess. It takes a while for them to make a CRL, get it into IE and Firefox, etc.

The tone we used was more one of wishful thinking than future certainty. :)

Re: RSA Signature Forgery Explained (with Nate Lawson) - Part IV

Emmanuel Leroux Sanders — Tue, 19 Sep 2006 12:37:51 -0000

nice. :-)

I am by no means a security specialist, but I love your blog and find it VERY interesting. Keep up the excelent work.

-Emmanuel

Re: RSA Signature Forgery Explained (with Nate Lawson) - Part IV

William — Tue, 19 Sep 2006 10:55:51 -0000

Great summary Thomas, thanks for taking the time to fill in the blanks.

Re: RSA Signature Forgery Explained (with Nate Lawson) - Part IV

Matt — Mon, 18 Sep 2006 15:57:25 -0000

However, we have started eliminating the few e=3 root certificates. That was a good idea.

Are the commercial CAs which deployed e=3 root certs (Entrust, <strike>Digital Signature Trust Co.</strike> IdenTrust, others?) known to be doing anything about this snafu?