Wednesday, March 30, 2011

Trust in Comodo, no really...

Contrary to popular belief (and self subscribed insantiy) Comodo is not "Hacker Proof" After the breach earlier this year at GlobalTrust It should come as no surprise that they have had yet another breach. Their CEO commented that We are rolling out improved authentication for all RA accounts. We are implementing both IP address restriction and hardware based two-factor authentication. The rollout of two-factor tokens is in progress but will take another couple of weeks to complete. Until that process is complete Comodo will review 100% of all RA validation work before issuing any certificate Reading statements like that, anyone who's studied for the CISSP in the past half decade could have told you two-factor tokenization was the norm at big shops like Verisign. Perhaps that's why Comodo's offerings are so much cheaper than the majority of their competitors. I guess trust really does have a pricetag.