Investigation Findings
On December 13, 2011 GlobalSign released its final report on the incident The detailed report outlined the timeline of events and concluded the following: There was no evidence of any rogue certificates issued or any customer data exposed. There was no evidence of compromised GlobalSign Root Certificate keys and associated Hardware Security Modules. There was no evidence of compromised GlobalSign CA infrastructure, Issuing Authorities and associated HSMs, or Registration Authority services.
GlobalSign’s incident report refers to a peripheral web server, hosting a public facing web server, that was breached. What would have been exposed were publically available HTML pages, PDFs, and the SSL Certificate and key issued to www.globalsign.com. GlobalSign revoked the SSL Certificate and key to their website and issued new ones.
Read more about this topic: Global Sign
Famous quotes containing the word findings:
“Our science has become terrible, our research dangerous, our findings deadly. We physicists have to make peace with reality. Reality is not as strong as we are. We will ruin reality.”
—Friedrich Dürrenmatt (1921–1990)