Certificate Authorities, DNSSEC, and the Future of Trust Agility
Whitfield Diffie and Moxie Marlinspike details come watch Whitfield Diffie and Moxie Marlinspike talk about certificate authorities, DNSSEC, SSL, dane, trust agility and whatever else they want to.
Summary
Architecture and Background
Come watch Whitfield Diffie and Moxie Marlinspike talk about certificate authorities, DNSSEC, SSL, dane, trust agility and whatever else they want to. Whitfield Diffie, Moxie Marlinspike, The Dark Tangent contextualize these mechanics within the broader privacy landscape.
Vulnerability Analysis
The analysis investigates key threat vectors and design shortcomings related to privacy, anonymity, data-protection, counter-surveillance.
Exploitation and Demonstrations
Come watch Whitfield Diffie and Moxie Marlinspike talk about certificate authorities, DNSSEC, SSL, dane, trust agility and whatever else they want to. Moderated by the Dark Tangent and with Q&A from the audience.
Remediation and Defensive Strategies
Defenders and researchers are provided actionable defensive mitigations, monitoring telemetry, and configuration safeguards to minimize systemic risk.
Related talks
Main Stage·51 min
Amber Lyon
Amber Lyon explores anonymous and the online fight for justice at DEF CON 20, examining privacy and practical defenses.
Main Stage·48 min
Chris Sumner · Randall Wald
Chris Sumner and Randall Wald details copy of the slides for this talk are here: Can Twitter Really Help Expose Psychopath Killers' Traits.
Main Stage·37 min
Elie Bursztein · Patrick Samy
Elie Bursztein and Patrick Samy explores fuzzing online games at DEF CON 20, examining privacy and practical defenses.