Trustico
Appearance
Company type | Private company |
---|---|
Industry | Internet security, Public key infrastructure |
Trustico is a certificate authority.
It became notable in March 2018, after its CEO transferred the private keys for 23,000 HTTPS certificates via email (not a secure protocol) to an executive at DigiCert.[1][2][3][4][5]
This was followed by the disclosure of a critical security flaw in the Trustico website, after which the website was taken offline.[6][7]
See also
References
- ^ https://arstechnica.com/information-technology/2018/03/23000-https-certificates-axed-after-ceo-e-mails-private-keys/
- ^ http://www.zdnet.com/article/trustico-compromises-own-customers-https-private-keys-in-spat-with-partner/
- ^ https://www.securityweek.com/23000-digital-certificates-revoked-digicert-trustico-spat
- ^ https://www.theregister.co.uk/2018/03/01/trustico_digicert_symantec_spat/
- ^ https://news.ycombinator.com/item?id=16492284
- ^ https://arstechnica.com/information-technology/2018/03/trustico-website-goes-dark-after-someone-drops-critical-flaw-on-twitter/
- ^ https://www.theregister.co.uk/2018/03/01/trustico_website_offline/