Vulnerable CAs in 2008 We collected 30,000 website certificates ○ 9,000 of them were signed with MD5 ○ 97% of those were issued by RapidSSL CAs still using MD5 in 2008: ○ RapidSSL ○ FreeSSL ○ TrustCenter ○ RSA Data Security ○ Thawte ○ verisign.co.jp
{}