Exploiting PKI for Fun and Profit - The Next Yellow Padlock Icon?

Explore the intricacies of Public Key Infrastructure (PKI) exploitation and its implications in this 45-minute conference talk. Delve into a comprehensive overview of public key cryptography, examine the EFF SSL Observatory, and understand the concept of ECA certificates. Learn about potential social engineering opportunities, including a case study at ORC. Investigate footprinting techniques for ORC networks and analyze ECA network security measures. Discover the requirements for Verisign ECA certificates and notary processes. Gain insights into DoD military leadership implications and explore additions to existing tools in the realm of PKI security.