Subject: [TLS] SSL/TLS and HTTPS in a Post-Prism Era

From: Ralf Skyper Kaiser <[email-masked]>
Date: Tue, 15 Oct 2013 15:42:24 +0100

Hi,

I created an incomplete summary of various reports about Certification
Authority breaches. I believe it is the most complete list to date
(additions welcome).

The summary also contains some (but not all) proposed security solutions
and enhancements for the 'CA Trust Problem' and some general security
enhancement for the deployment of SSL/TLS.

Comments and feedback are welcome.

https://thc.org/ssl

and a video parody to explain the problem to non-technical people:

http://youtu.be/F3BMA3IuvYs

Best Regards,

Ralf