Hitachi ID Systems Blogs  Archive for January, 2012  No
authentication is free of risk  Tuesday, January 10th, 2012
Interesting news bits. Not many people realize what is a root
certificate or what does it do on a day to day basis. Think of a
root certificate as the master key to unlock all the bank safe
in the world. That effectively is what happening when Trustwave
a trusted Certificate provider on major browser platform decided
to profit off the certificate that enables a company claims to
be only using it for the purpose of ear dropping on their own
employee.  Wasn’t that long ago when I had to remove the
digiNotar from my trusted list of certificate provider from all
of my browsers. Not long after that I have to remove the trust
from “Trustwave”.  This news was interesting to me because many
methods of exchange for authentication token is based on trust
of certificate. The lack of trust of secure communication
implies a broken exchange of authentication model going from
Certificate authentication to SAM