You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
content spoofing
About this tag
Content spoofing is a security vulnerability where an attacker manipulates or forges digital content to deceive users or systems. On WindowsForum.com, discussions highlight how weak cryptographic practices, such as the use of the SHA-1 hashing algorithm in digital certificates, can enable content spoofing, phishing, and man-in-the-middle attacks. Microsoft's deprecation of SHA-1 for root certificates and incidents involving inadvertently disclosed private keys from Dell underscore the risks. These topics are relevant to Windows users and IT administrators concerned with certificate security and spoofing prevention.
Revision Note: V1.0 (January 12, 2016): Advisory published.
Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. The new policy no longer allows root certificate authorities to issue X.509 certificates using the SHA-1 hashing algorithm for the purposes of...
Revision Note: V1.0 (November 30, 2015): Advisory published.
Summary: Microsoft is aware of unconstrained digital certificates from Dell Inc. for which the private keys were inadvertently disclosed. One of these unconstrained certificates could be used to issue other certificates, impersonate...
Revision Note: V1.0 (November 30, 2015): Advisory published.
Summary: Microsoft is aware of unconstrained digital certificates from Dell Inc. for which the private keys were inadvertently disclosed. One of these unconstrained certificates could be used to issue other certificates, impersonate...