Microsoft says "No!" to insecure certificate practices

[JMH]

Patch Tuesday is here, and I'd like to draw your attention to a broader policy decision Microsoft will be deploying next Patch Tuesday (October).

The strength of digital certificates is something I frequently write about here on Naked Security because I believe we all too often fall back to the lowest common denominator. Microsoft's market dominance means that, like it or not, they are somewhat responsible for establishing the minimum accepted practice.

http://nakedsecurity.sophos.com/201...Feed:+nakedsecurity+(Naked+Security+-+Sophos)

 

[AceInfinity]

The issue here is at least recognized lol... I wonder what they will do to make it secure "enough" though.