Some well-known websites could stop functioning properly on Wednesday, 4 March, after a bug was found in the digital certificates used to secure them, the BBC reported last night.The organisation that issues the certificates revealed that three million need to be immediately revoked.
Visitors to affected sites will be greeted with an alert warning them the site is insecure. One expert said the issue could result in a “loss of trust”. In a notification email to its clients, the organisation said: “We recently discovered a bug in the Let’s Encrypt certificate authority code.
“Unfortunately, this means we need to revoke the certificates that were affected by this bug, which includes one or more of your certificates. To avoid disruption, you’ll need to renew and replace your affected certificate(s) by Wednesday, March 4, 2020. We sincerely apologise for the issue.”
https://twitter.com/sf_tristanb/status/1234898588548947974
Experts Comments
Linkedin Message
@Israel Barak, Chief Information Security Officer , provides expert commentary at @Information Security Buzz.
"We are all measured on how we communicate and help our customers and partners manage risk...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Facebook Message
@Israel Barak, Chief Information Security Officer , provides expert commentary at @Information Security Buzz.
"We are all measured on how we communicate and help our customers and partners manage risk...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Linkedin Message
@Tim Mackey, Principal Security Strategist, Synopsys CyRC (Cybersecurity Research Center), provides expert commentary at @Information Security Buzz.
"Assuming that any certificate will remain valid until its complete expiration date is unrealistic. ..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Facebook Message
@Tim Mackey, Principal Security Strategist, Synopsys CyRC (Cybersecurity Research Center), provides expert commentary at @Information Security Buzz.
"Assuming that any certificate will remain valid until its complete expiration date is unrealistic. ..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Linkedin Message
@Chad Anderson, Research Engineer , provides expert commentary at @Information Security Buzz.
"Certificates through Let’s Encrypt are not meant for manual renewal...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Facebook Message
@Chad Anderson, Research Engineer , provides expert commentary at @Information Security Buzz.
"Certificates through Let’s Encrypt are not meant for manual renewal...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Linkedin Message
@Kevin Bocek, VP Security Strategy & Threat Intelligence, provides expert commentary at @Information Security Buzz.
"Angry customers, angry executives. ..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Facebook Message
@Kevin Bocek, VP Security Strategy & Threat Intelligence, provides expert commentary at @Information Security Buzz.
"Angry customers, angry executives. ..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Linkedin Message
@Ted Shorter, CTO , provides expert commentary at @Information Security Buzz.
"Everyone makes mistakes. It’s commendable for Let\'s Encrypt to be proactive and revoke so many certs...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Facebook Message
@Ted Shorter, CTO , provides expert commentary at @Information Security Buzz.
"Everyone makes mistakes. It’s commendable for Let\'s Encrypt to be proactive and revoke so many certs...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Jake Moore, Cybersecurity Specialist, provides expert commentary at @Information Security Buzz.
"Affected businesses will need to quickly apply for a new certificate...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings
Facebook Message
@Jake Moore, Cybersecurity Specialist, provides expert commentary at @Information Security Buzz.
"Affected businesses will need to quickly apply for a new certificate...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/experts-reaction-on-millions-of-websites-face-insecure-warnings