SEARCH
Archive
New CA Focus on EV Certs Won’t Stop Phishing
The CA Security Council's London Protocol attempts to address the problem of phishing sites with legitimate SSL/TLS certificates, but the initiative perpetuates the myth that the pricier EV certificates are more secure than DV certificates.
STARTTLS Everywhere Aims to Secure Email on a Large Scale
A new project from the EFF offers a quick path to a more secure email ecosystem.
Ancient Bug Haunts GnuPG-Based Encryption Tools
A bug from the 1990s allows attackers to spoof signatures on some encrypted emails in GnuPG and other tools.
Encrypt Act Blocks States From Banning Encryption
A group of lawmakers from both parties have introduced a new bill in the House of Representatives that would stop states and local governments from passing laws governing encryption. This will prevent states from passing their own laws before the federal government figures out what to do.
Google Puts Plaintext HTTP Out to Pasture
Google Chrome will mark all HTTP pages as not secure in the coming months, a major milestone in the overdue death of plaintext connections.