Malware Related > Tools of the trade / Internet News

When a Signed Java JAR file is not Proof of Trust

(1/1)

SysAdMini:
http://eromang.zataz.com/2013/03/05/when-a-signed-java-jar-file-is-not-proof-of-trust/



--- Quote ---Today, Malware Domain List, reported strange behaviours regarding a Java app executed with the latest version of Java 6.
--- End quote ---

dlipman:
I didn't know GoDaddy was a CA.

SysAdMini:

--- Quote from: dlipman on March 05, 2013, 09:55:21 pm ---I didn't know GoDaddy was a CA.

--- End quote ---

Me too.

dlipman:
I guess they do.

http://www.godaddy.com/ssl/code-signing-certificate.aspx

I hope its not like Comodo.  I remember a time when we had to have Kishor revoke Comodo certificates used with malware.

Navigation

[0] Message Index