The EFF has taken a look at the data from certificate revocation lists for SSL certificates in recent months. The only widely known CA compromise since June is the attack on DigiNotar this summer that completely compromised that company s CA infrastructure. No clear solution to the problem has emerged, although the Convergence system designed by Moxie Marlinspike has garnered some attention. The organization is planning to propose its own plan for solidifying the CA infrastructure soon, says Peter Eckersley of the EFF.
Source: https://threatpost.com/eff-data-shows-four-cas-compromised-june-102711/75812/

