A Sneak Peek At October's Microsoft Patch Tuesday

By Ken Presti
October 04, 2012 4:32 PM ET

Page 2 of 2

Also on Tuesday, Microsoft will activate its new policy that invalidates any certificate with encryption of 1,024 bits or less.

"It has been considered bad form to use certificates with such a short key length," said Qualys' Kandek. "In our research, we have only detected two certificates of that type. The impact is that you would expect to see an Internet Explorer warning when you go to a site that has a weakly encrypted certificate. But, I don't expect this to cause any large-scale issues."

This shift in policy is directly related to Flame malware, which has the capability of exploiting short encryption and certificates.

PUBLISHED OCT. 4, 2012

<< Previous | 1 | 2

To continue reading this article, please download the free CRN Tech News app for your iPad or Windows 8 device.

Related: Videos | Slide Shows | Comments

SHARE THIS ARTICLE

More Security

Comments by Vanilla

Recent Articles

	Head-To-Head: Symantec Vs. McAfee In Endpoint Protection McAfee and Symantec are archrivals with a firm grip on the North American security market. CRN pits both vendors' endpoint security products against each other and names a winner.
	The 8 Steps Behind The Massive $45M Cyber Bank Heist More than $45 million was stolen from banks in the U.S. and 19 other countries in a scheme that law enforcement is calling an international conspiracy to drain millions from bank accounts using stolen debit cards and PIN numbers. Here's how they did it.
	Name Of The Game: Top 10 States For Identity Theft A Federal Trade Commission report provides statistics on identity theft and fraud complaints in 2012. Learn which state has the dubious distinction of having the most victims.
	More Slide Shows