Public Key Infrastructure
A system for creating, managing, distributing, and revoking digital certificates that provides the trust foundation for public key encryption and digital signatures.
Timeline (last 90 days)
CA (certificate authority) keys are the root of trust in public key infrastructure; once leaked, attackers may forge certificates and then carry out man-in-the-middle attacks or impersonate legitimate services.
Browsers and operating systems have built-in trusted root certificate lists, and only certificates issued by these root certificates or their subordinate intermediate CAs are considered valid.
Digital signatures are based on public key infrastructure (PKI) and are generated from digital certificates issued by certificate authorities; they can verify the signer's identity and detect whether a document has been tampered with after signing.
All Facts (3)
CA (certificate authority) keys are the root of trust in public key infrastructure; once leaked, attackers may forge certificates and then carry out man-in-the-middle attacks or impersonate legitimate services.
50%UnverifiedBrowsers and operating systems have built-in trusted root certificate lists, and only certificates issued by these root certificates or their subordinate intermediate CAs are considered valid.
50%UnverifiedDigital signatures are based on public key infrastructure (PKI) and are generated from digital certificates issued by certificate authorities; they can verify the signer's identity and detect whether a document has been tampered with after signing.
50%