turktrust

The turktrust tag covers discussions about a 2013 security incident involving fraudulent digital certificates issued by TURKTRUST Inc., a certificate authority (CA) trusted by Microsoft Windows. Microsoft released Security Advisory 2798897 to address active attacks where a fraudulent certificate was used for spoofing, phishing, or man-in-the-middle attacks. The advisory details how TURKTRUST incorrectly created two subsidiary CAs, leading to the compromise. Microsoft updated the Certificate Trust List (CTL) to revoke trust for the affected certificates. Topics include certificate trust, CA misissuance, and Windows security updates.