New Service Checks Users' SSL Certificates

^{November 7, 2012}
Networking Group researchers have made available a new service that provides near real-time reputation information on TLS/SSL certificates. The ICSI Certificate Notary improves the security of users' Internet activity by allowing clients to compare certificates they encounter while browsing the Web against a third-party database. Such checks help avoid man-in-the-middle attacks where an adversary assumes the identity of a well-known secure site (for example, a bank or email provider) by serving a malicious certificate. The Notary's data is collected continuously from live traffic at about 10 partner organizations using ICSI's open-source Bro network monitor. Read more at http://notary.icsi.berkeley.edu.