StartSSL Flaw Allowed Attackers to Obtain SSL Cert for Any Domain

Popular certificate authority StartSSL (StartCom) has resolved a security vulnerability in its domain validation process that could be abused by attackers to issue certificates for domains they do not own.

read more

Original author: SecurityWeek News