Hi guys, I've noticed that an SSL channel is available for use for the Web Client authentication. This is cool, but what worries me, as silly as this may sound, is that your certificate for this is issued by GoDaddy. I would hope that a company as concious of security as Yubico would at least have a certificate from Verisign, or Thawte.
Don't get me wrong, it probably is very secure. It's just I'm also a GoDaddy customer, and I know how easy it is to generate a TurboSSL certificate. I know I'd feel much safer knowing the SSL authority issuing the cert was a bit more reputable.
My thought for the day.
Cheers! Massyn
|