Apple Blocks Certificates That Could Help Attackers Fake Websites

Apple has blocked compromised security certificates on its devices that could help attackers impersonate websites, BleepingComputer reports. The certificates were issued by certificate authority eMudhra. According to Mozilla's investigation, their private keys were all numbers below 256, making them almost instantly recoverable. Attackers could use the affected website certificate keys to create fraudulent certificates that vulnerable software would trust. Apple introduced the blocks on October 19, according to an advisory from Mozilla cryptography engineer Dennis Jackson. These protections stop software using Apple's system checks from trusting the compromised certificates. Jackson says Saf

Questo articolo è stato originariamente pubblicato da MACRUMORS. Per visualizzare l'approfondimento originale e supportare gli autori, clicca sul link di seguito.