Exploiting PKI for Fun and Profit - The Next Yellow Padlock Icon?

Explore the intricacies of Public Key Infrastructure (PKI) exploitation and its implications in this 45-minute conference talk. Delve into a comprehensive overview of public key cryptography, examine the EFF SSL Observatory, and understand the concept of ECA certificates. Learn about potential social engineering opportunities, including a case study at ORC. Investigate footprinting techniques for ORC networks and analyze ECA network security measures. Discover the requirements for Verisign ECA certificates and notary processes. Gain insights into DoD military leadership implications and explore additions to existing tools in the realm of PKI security.

Intro
Public Key Crypto Refresher
EFF SSL Observatory
Back to the PKI training....
What's an ECA certificate?
Social Engineering Opportunity?
Social Engineering at ORC
Footprinting the ORC Network
ECA Network Security
Verisign ECA certificate
Notary Requirements
DoD Military Leadership
Additions to existing tools...