logo

ca-certificates

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/ca-certificates.git

CertificatesAutorities.md (1226B)

    

  1. ## CACert.org
  2. -recomendations: Medium
  3. 	- SHA1 Fingerprint
  4. 	- no ECC certificates
  5. -signed: 1024D OpenPGP on SHA1 fingerprint
  6. -verification:
  7. 	- domains aren’t checked for modifications (verifies only once)
  8. 	- uses hardcoded/whois’ed emails… not so secure (let’s register every {admin,root,webmaster}@host with public registeration)
  10. ## immerda.ch
  11. -note: There is something about Let’s Encrypt on the website, I hope they keep their CA until Let’s Encrypt is more trustable
  12. -recomendations: OK
  13. -signed: OpenPGP on root
  14. -verification: unknow
  16. ## sks-keyservers.net
  17. -recomendations: OK
  18. -signed: OpenPGP on root
  19. -verification: OK(only for keyservers)
  21. ## hackint.org
  22. -signed: OpenPGP on root
  23. -recomendations: OK
  24. -verification: OK(only for hackint.org)
  26. ## LetsEncrypt.org
  27. -note: is probably too big[1], legalities are horrible (but you don’t actually accept them knownfully)
  28. -recomendations: OK
  29. -signed: No
  30. -verification: OK(ACME)
  32. ## IdenTrust.com
  33. -note: Cross-sign of LetsEncrypt.org
  34. -recomendations:
  35. 	- SHA1 Fingerprint
  36. -signed: No
  37. -verification: unknow
  39. ## Symantec.com
  40. -recomendations:
  41. 	- SHA1 Fingerprint
  42. -signed: Fingerprint but SHA1
  43. -verification: unknow
  45. ---
  46. 1: owners/crackers/governments will do shit on it