Delete DigiNotar Certificate

DigiNotar B.V., a unit of VASCO Data Security International, Inc., is an Internet Trust Service Provider based in the Netherlands. Part of their business involves issuing digital certificates. In other words, they are a CA, or Certificate Authority.

You use digital certificates when you access a secure website, for example. If the certificate presented to your browser by the website is valid, no problem. But if for any your browser does not trust the website’s certificate, it will throw up a page complaining that the website’s certificate is not valid, or has expired. And you will usually be given the choice to issue a security exception or exit from the session.

Unless you can verify by some other means, issuing security exceptions for invalid or expired certificates is a very bad idea. As paranoid as I can be about security matters, I have been guilty of that several times. I will have to raise my level of cautiousness to another level.

Related Post:  How to enable two-factor authentication on Dropbox

In any case, DigiNotar’s security system was compromised and they failed to notify everybody they were supposed to. A result of that breach is that fake certificates were issued – in DigiNotar’s name – for Mozilla, WordPress, Yahoo!, the TOR Project, and some other websites.

Most of the original press coverage is not in English, but Swa Frantzen has translated some of the published materials from Dutch.

The extent of the damage, or potential for damage, is so bad that The Mozilla Foundation, publishers of the Firefox Web browser, revoked digital certificates issued by DigiNotar. Bad news.

Update: The alleged hacker behind the DigiNotar breach has said that “I have access to 4 more so HIGH profile CAs, which I can issue certs from them too which I will.”

Related Post:  Dual-boot Windows 7 and Antergos on a PC with 2 HDDs and UEFI firmware

If you are using Firefox or other re-branded Web browser derived from it, and updates have not been available yet, delete DigiNotar from the list of Certificate Authorities.

Here’s how to do it.

From the browser’s menu, select Edit > Preferences. The Preferences window, shown below, should open. Click on “Advanced,” then on the Encryption tab, then on “View Certificates” button.
Firefox Preferences

Scroll down until you see the entry for DigiNotar. Select it, then click on Delete.
List of Digital Certificates

Exactly what we want to happen. OK. Back to the previous window, click OK to close it, then click Close on the Preferences window.
Delete DigiNotar Certificate

That should do it.

Share:

Share on facebook
Facebook
Share on twitter
Twitter
Share on pinterest
Pinterest
Share on linkedin
LinkedIn

Hola! Did you notice that LinuxBSDos.com no longer runs network ads?  Yep, no more ads from the usual suspects that track you across the Internet.  But since  I still need to pay to keep the site running, feel free to make a small donation by PayPal.

Subscribe for updates. Trust me, no spam!

Mailchimp Signup Form

Sponsored links

1. Attend Algorithm Conference, a top AI and ML event for 2020.
2. Reasons to use control panel for your server.
3. DHgate Computers Electronics, Cell Phones & more.

4 Responses

  1. I like the taskbar thumbnails. They are useful especially if you use smooth tasks or icons-only task manager.

    1. Task Manager Settings is available only on a default KDE panel. If using RocketBar, the default panel on ROSA Marathon and Mandriva 2011, that setting is not available.

Leave a Reply

Your email address will not be published. Required fields are marked *

Get the latest

On social media
Via my newsletter
Mailchimp Signup Form

Partner links

1. Attend Algorithm Conference, a top AI and ML event for 2021.
2. Reasons to use control panel for your server.
3. DHgate Computers Electronics, Cell Phones & more.
Hacking, pentesting distributions

Linux Distributions for Hacking

Experts use these Linux distributions for hacking, digital forensics, and pentesting.

Categories
Archives

The authors of these books are confirmed to speak during

Algorithm Conference

T-minus AI

Author was the first chairperson of AI for the U.S. Air Force.

The case for killer robots

Author is the Director of the Center for Natural and Artificial Intelligence.

Why greatness cannot be planned

Author works on AI safety as a Senior Research Scientist at Uber AI Labs.

Anastasia Marchenkova

An invitation from Anastasia Marchenkova

Hya, after stints as a quantum researcher at Georgia Tech Quantum Optics & Quantum Telecom Lab, and the University of Maryland Joint Quantum Institute, I’m now working on superconducting qubit quantum processors at Bleximo. I’ll be speaking during Algorithm Conference in Austin, Texas, July 16 – 18, 2020. Meet me there and let’s chat about progress and hype in quantum computing.