<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Angels of security &#187; pki</title>
	<atom:link href="http://angelsofsecurity.com/blog/tag/pki/feed/" rel="self" type="application/rss+xml" />
	<link>http://angelsofsecurity.com/blog</link>
	<description>Musings of an infosec renegade</description>
	<lastBuildDate>Tue, 02 Aug 2011 19:01:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
		<item>
		<title>wildcard certificates security</title>
		<link>http://angelsofsecurity.com/blog/2010/07/25/wildcard-certificates-security/</link>
		<comments>http://angelsofsecurity.com/blog/2010/07/25/wildcard-certificates-security/#comments</comments>
		<pubDate>Sun, 25 Jul 2010 19:21:54 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[cryptography]]></category>
		<category><![CDATA[certificates]]></category>
		<category><![CDATA[pki]]></category>

		<guid isPermaLink="false">http://angelsofsecurity.com/blog/?p=601</guid>
		<description><![CDATA[In the previous post I mentioned multi-domain certificates but not wildcard certificates as a solution to the problem. The reason I didn&#8217;t mention wildcard certificates is because they have their own inherent security risks. If one subdomain is compromised, all subdomains may be compromised. (Verisign even states this clearly on their page on wildcard certificates.)]]></description>
			<content:encoded><![CDATA[<p>In the previous post I mentioned multi-domain certificates but not wildcard certificates as a solution to the problem. The reason I didn&#8217;t mention wildcard certificates is because they have their own inherent security risks. If one subdomain is compromised, all subdomains may be compromised. (Verisign even states this clearly on <a href="http://www.verisign.com/ssl-certificates/wildcard-ssl-certificates/">their page on wildcard certificates</a>.)</p>
]]></content:encoded>
			<wfw:commentRss>http://angelsofsecurity.com/blog/2010/07/25/wildcard-certificates-security/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

