Technical Articles
F5 SMEs share good practice.
cancel
Showing results for 
Search instead for 
Did you mean: 
ltwagnon
Legacy Employee
Legacy Employee

In the world of secure websites, it's critical to maintain proper ownership of the certificate that helps protect your site.  Certificates hold the encryption keys that allow users to securely interact with your site.  When a certificate expires or changes ownership, it is important (and even required) that it be revoked and replaced with a new, updated certificate.  This ensures that the current owner of the certificate is the only one who can offer legitimate access to that specific website. 

Some really smart guys (Ian Foster and Dylan Ayrey) found what they have termed "Bygone SSL" where one person can hold a valid certificate for a website that someone else owns!  This interesting phenomenon is not necessarily a result of nefarious behavior, but rather the reality of how certificates work today.  In this video, John explains the issue and outlines the reason this is happening.  Enjoy!


 

Related Resources:

Comments
Saravanan_M_K
F5 Employee
F5 Employee

Great one as usual. Thank you so much.

 

rob_carr
Cirrostratus
Cirrostratus

It's probably me, but the lightboard lessons are now requiring a Google Apps account to view.

 

rob_carr_76748
Nimbostratus
Nimbostratus

It's probably me, but the lightboard lessons are now requiring a Google Apps account to view.

 

ltwagnon
Legacy Employee
Legacy Employee

@rob_carr...interesting. I'm able to view them without the Google Apps account. Is it forcing you to use Google Apps only for the DevCentral Lightboards? Or, does it make you use it for all YouTube videos? Thanks for the feedback!

 

Version history
Last update:
‎29-Oct-2018 06:23
Updated by:
Contributors