That Crypto Hole Is Probably Not A Threat, But It’s Still A Wake-Up Call
Written by Frank HayesFebruary 23rd, 2012
If you liked 500-to-1 odds against your encryption keys being bad, it's even better: The cryptographic hole that surfaced last week appears to be completely confined to devices such as consumer-grade routers. But even RSA, whose key security was questioned by the original report, now says it should serve as a wake-up call for network security, especially among retailers.
"This is one reason why the PCI SSC is spending a lot of time developing very detailed solution requirements for new technologies like Point-to-Point Encryption," said RSA spokesman Rob Sadowski. "It's not enough to have the best security tools if they are not implemented and deployed well."
This Story Is Only Available For Premium Subscribers. Click Or Login In Below To Read The Rest Of This Story.
Already a Subscriber? Login Here
Leave a Reply
Readers, specifically those who want to comment on a story:
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
Our Comment SPAM system is getting very aggressive these days and has been blocking legitimate comments. If you post a comment and don't see it appear within 2 hours or so, can you please send a heads-up to customer-service@storefrontbacktalk.com? Ideally, please include the time you posted the comment. That will allow us to try and hunt for it. Thanks! P.S. We're working on fixing the system, but we don't want to lose any valuable comments in the meantime.
I have strong reservations about the 'individual' certification and posting of that information for merchants. Can you imagine the potential employee poaching that might occur? The implications when competitors can look up how many are certified with each of their competitors? 
-Christine
