byte.org
19962013
Random Bytes, 2003–2009

VeriSign's conflict of interest creates new threat

in Code

Financial Cryptography:  "...what's VeriSign doing issuing certs? What's it doing claiming that users can trust it? The real conflict of interest here is in a seller of certs also being a prime contractor for easy breachings of certs."

I came across this excellent post this morning while trawling del.icio.us that comprehensively outlines an issue that has been bothering me for quite sometime. It describes in great detail the conflict of interest that Verisign has created for itself with its SSL, domain name registry and wiretapping operations and why this should be a concern for its customers.

See this post as it first appeared on Blogware.