COMODO

Press Release: Comodo, a leading Certificate Authority and Internet security organization, today announced it acknowledges that VeriSign has made some recent fixes to its security issues that were identified by Comodo, which notified VeriSign through an independent third-party of the problems it discovered more than a week ag

In our initial request we asked that VeriSign take immediate steps to correct and remediate the vulnerability and notify all affected users who may be affected by this security vulnerability and I truly hope that those steps have been taken.  On 23rd June, Comodo provided VeriSign with a second disclosure document on the previously reported vulnerability. VeriSign’s response was to make further corrections with respect to the security issues reported to them by Comodo.

“We are pleased to see that some of the security flaws have now been addressed by VeriSign,” said Comodo CEO, Melih Abdulhayoglu. “In our initial request we asked that VeriSign take immediate steps to correct and remediate the vulnerability and notify all affected users who may be affected by this security vulnerability and I truly hope that those steps have been taken.”

VeriSign has publicly acknowledged fixes to their certificate management portal, including removing some of the features that were publicly assessable and ensuring that the portal is no longer found through methods of search and in Google, and requests for revoking of certificates are no longer available publicly.

Comodo believes there are still issues that need to be addressed, but VeriSign’s response to the topic in question has been encouraging so far.