Home / About / Media Coverage / Important

CIO Magazine

Trustwave admits issuing man-in-the-middle digital certificate, Mozilla debates punishment

“Trustwave defended itself by saying that the issuing of subordinate roots to private companies, so they can inspect the SSL-encrypted traffic that passes through their networks, is a common practice in the industry. However, the CA decided to stop issuing such certificates in the future and revoke the existent ones. ‘I would say that Trustwave should be commended for making this statement public, knowing that this could result in reputational damage,’ said Calum MacLeod, director for the EMEA region at Venafi. ‘I believe it is commendable that they will no longer continue this practice, but the reality is, in my opinion, that this is a common industry practice.’”
Read More