DEF CON 31 - A SSLippery Slope - Unraveling Hidden Dangers of Certificate Misuse - Bill Demirkapi

Digital signatures are fundamental for verifying the authenticity and integrity of untrusted data in the digital world. They ensure that software, firmware, and other digital content are not tampered with during transmission or at rest. Code signing certificates are significantly more challenging to obtain when compared to alternatives like SSL or S/MIME certificates. The latter only has a single criterion- proof of control over a domain, while the former requires significant validation of the publisher itself.

This project uncovered a …

authenticity bill bill demirkapi certificate certificates code code signing code signing certificates con data def def con def con 31 demirkapi digital digital signatures digital world firmware hidden integrity rest signatures signing software transmission untrusted world