StartSSL, a web authentication authority, suspend services after a security breach

SANS ISC InfoSec Forums

StartSSL, a web authentication authority, suspend services after a security breach
An attack on web authentication authority StartSSL has lead to them suspending their services and stopped issuing any further certificates. From the landing page of Startssl's web site [1] they offer this information: Due to a security breach that occurred at the 15th of June, issuance of digital certificates and related services has been suspended. Our services will remain offline until further notice. Subscribers and holders of valid certificates are not affected in any form. Visitors to web sites and other parties relying on valid certificates are not affected. We apologize for the temporary inconvenience and thank you for your understanding The Register web site has more information on the story [2] [1] https://www.startssl.com/ [2] http://www.theregister.co.uk/2011/06/21/startssl_security_breach/ Chris Mohan --- Internet Storm Center Handler on Duty	Chris 105 Posts ISC Handler Jun 21st 2011
Thread locked Subscribe	Jun 21st 2011 1 decade ago
Site is back online	Anonymous
Quote	Jun 21st 2011 1 decade ago