Yet Another PHP Security Blog

There’s a very good writeup by fellow security analyst Moxie Marlinspike in the ThreatPost blog that details the current issues with SSL and trust roots - and although a little short on actual mitigation ideas - pretty much nails all the problems that we currently have. As a little sugarcoating, he also dismantles the notion that DNSSEC is “our savior”.

And there’s a clever little jab at GoDaddy.

Go find the article here at ThreatPost.