Posted January 6, 2009 - 3:32 pm
A group of international security researchers recently demonstrated successful attacks against the Public Key Infrastructure (PKI) used to issue security certificates to Web sites when the signatures are generated with the MD5 hash function. Happily, the vulnerability is simple to identify and easy to remediate.