Jul, 2003 : Thawte: Duplication Issue Won't Affect Security


📅 - Thawte (thawte.com), a provider of digital trust solutions, has revealed that its systems have issued certificates with duplicate numbers over the last few months.

The issue came to light during an internal audit. The company said it immediately fixed the problem and also implemented an automated check in its system that searches for and reports all possible duplicate serial number assignments before any Thawte certificate is issued.
A duplication of serial numbers means that a certificate may be sharing a serial number with another Thawte certificate. Thawte says this is a configuration issue and does not affect the unique identification of the certificate or its secure operation on the Web server. Each Thawte certificate still fully authenticates and encrypts data ? the security provided by the certificate has not been compromised.
In a posting on its Web site, Thawte explained the situation in detail: ?The actual secure operation of your certificate on the Web server is exactly the same. Certificates still authenticate our customers as legitimate entities and encrypt all data sessions as advertised and promised. The certificate has been mislabeled with a duplicate serial number. This does not affect our ability to uniquely identify your certificate. Your certificate still has a unique identification in the Thawte system.?
Over the next two weeks, Thawte will send out another further e-mail notifications with complete instructions for customers on the most straightforward way to obtain a free re-issued certificate the company is offering.
Based in Cape Town, South Africa, Thawte is a developer of digital trust solutions. The company was acquired by VeriSign in December 1999.

Reads: 1953 | Category: General | Source: TheWHIR : Web Host Industry Reviews
URL source: http://www.thewhir.com/marketwatch/tha071803.cfm

Company: Thawte

Want to add a website news or press release ? Just do it, it's free! Use add web hosting news!