Add VeriSign code signing incident in 2003

8 years ago · 2b4da7183d
parent a912027e61
commit 2b4da7183d
1 changed files with 1 additions and 0 deletions
--- a/README.md
+++ b/README.md
@ -98,6 +98,7 @@ This list is sorted alphabetically by the names of the Certificate Authorities.

 ### Verisign (CA is now owned by Symantec)

+* __March 2003:__ VeriSign is found to have issued a fraudulent code signing certificate in the name of Microsoft Corporation. This allows an attacker to pretend that their software was verified and signed by Microsoft. ([source](https://technet.microsoft.com/en-us/library/security/ms01-017.aspx))
 * __2010:__ Verisign is compromised, and undisclosed information is obtained by the attackers. ([source](http://www.reuters.com/article/us-hacking-verisign-idUSTRE8110Z820120202))

 ### WoSign