Users might not care to trust the very mechanism that's supposed to provide online trust.

Sara Peters, Senior Editor

July 9, 2014

7 Slides

Remember SSLStrip? Remember THC-SSL-DOS? Remember when DigiNotar was breached by attackers who issued more than 500 counterfeit SSL certs? That's just a few of the successful hacks that have already ruptured the system that so much Internet security depends upon... and there will be more.

Then again, none of this would be a problem if we simply didn't expect so much from SSL and rely upon it so heavily. So maybe SSL isn't the problem. Maybe we are.

About the Author(s)

Sara Peters

Senior Editor

Sara Peters is Senior Editor at Dark Reading and formerly the editor-in-chief of Enterprise Efficiency. Prior that she was senior editor for the Computer Security Institute, writing and speaking about virtualization, identity management, cybersecurity law, and a myriad of other topics. She authored the 2009 CSI Computer Crime and Security Survey and founded the CSI Working Group on Web Security Research Law -- a collaborative project that investigated the dichotomy between laws regulating software vulnerability disclosure and those regulating Web vulnerability disclosure.


Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.

You May Also Like


More Insights