Real-world use for MD5 Collisions

Practical implications of weak cryptography - Creating a rogue CA certificate. What does this mean? If this approach is generalised, you can't trust secure websites at all -> every single secure website may not be who you think they are, even if your browser happily presents the "little green tick". So who uses secure websites? ecommerce (Amazon, eBay, your bank), the tax office, many government departments, social networking portals, software update sites, software download sites. Scary, yes, but highlights the need to build seemlessly upgradable cryptographic software solutions - and we need to do this now before public confidence in our virtual world is eroded.

/tech/code | 31 Dec 2008 | #