zknews

trending2

tag: authenticode ✕

01▲
Reluctant enforcers: certificate authorities as malware police blog.randomoracle.io
An essay on CAs revoking Windows code-signing certs for malware, and why PKI was never meant to be a software cop.
authentication authenticode authorization blogs code-signing malware pki pkix revocation security windows x509
12 pts/dan/6 days ago/discuss
02▲
Windows revocation providers: beyond platform trust blog.randomoracle.io
Deep dive on Windows revocation providers and trust validation, for when CRL/OCSP's good enough is apparently not.
authenticode blogs certificates code-signing crl ocsp pki pkix revocation security windows
4 pts/dan/11 days ago/1 comment