Jonathan Wiltshire: StartSSL: finally, a trustworthy certifier*
Matt Brown writes about StartCom, the Israeli issuer providing basic SSL certificates for nothing.
In fact I ve been using StartSSL certificates for about three years now, but I get them issued to Level 2 verification which incurs a fee. (It s more expensive now than when I was first validated, but still good value.)
StartCom are the only issuer I ve ever dealt with who work like this. They validate the individual, using:
StartSSL: finally, a trustworthy certifier* is a post from: jwiltshire.org.uk Flattr
- two forms of government ID
- third-party background checks
- telephone verification at a number of their choosing, based on the checks
- validate domains and issue as many certificates as you wish, valid for two years, including SAN and wildcard certificates
- validate email addresses and issue X.509 certificates in your name
- issue code signing and XMPP certificates
- undertake stringent Organisation Validation, and then issue certificates in a company name as well as an individual
- validate other individuals with a web-of-trust arrangement, like CACert
- undergo Extended Validation and issue EV certificates
- if you have an unspecified amount of money, become a private CA yourself
StartSSL: finally, a trustworthy certifier* is a post from: jwiltshire.org.uk Flattr
The text I ve cropped too eagerly says Choosing a secure password is an essential part of protecting your personal information , or thereabouts. I duly chose a complex password that fitted the requirements, and to my surprise it was rejected. I tried another, and it was rejected; then a third and a fourth. By trial and error I worked out what was going on:
1. The password must contain only the listed special characters, not just include one of them.
That s a bit of a problem, because even assuming a basic ASCII set, 15 characters are unavailable to users; 80 are left, so that s about a 15% fall in the available combinations*. Not a good start.
More concerning is the presence of a security question field. It s used for resetting the password in the event losing it, but this technique for recovery has 
Actually the first form, not shown here, initially just asks for a username, giving an error message if it isn t registered, and here s another problem:
3. The password reset process confirms the existence, or non-existence, of a given username half the credentials required to log in to any visitor.
I d be prepared to take a bet that most users will choose What was the name of your first school? as a security question. The first pet you have is often at such a young age you can t remember it clearly; the name of the street you grew up on might change a couple of times if you moved house. But first school I attended? I ll never forget that, so it makes most sense to use as a backup password . It s also the best one for an attacker to try and find out from public sources.
But that aside, as you can see the password is not generated at random and communicated to the real account holder out-of-band, in the manner of many other sites. Instead:
4. A new password is immediately set to a value already known by the attacker.
Once inside, an attacker can also change the security question or answer, or both, so you can t even regain your account by telephoning the company unless you can convince them you re genuine, in which case the security question was a total waste of time anyway. I awarded some marks for notifying the user by email that the password has been changed, but immediately docked them again because bingo! You re now a victim of identity theft!
Let s assume you ve been locked out, the security question has been changed and you want your account back. ALLOW don t let you telephone them; you either have to dig around and find an address to send an email, which we all know can be intercepted, or (and you re encouraged to) contact them through a form on the site. You ll probably include some personal details, because you want to convince them of your real identity; indeed, two of the options on the form are I ve got a question and Something doesn t work . I sent my findings through this very form, under the latter heading, and to my surprise:
5. Despite promises of full encryption of all data at all times, full implementation of secure socket layers , the contact form is transmitted to ALLOW in the clear, with no protection whatsoever.
So now anyone listening in your connection knows all about you too: your ISP, any of the peers along the route, the deep packet inspection advertisers if your ISP is less than reputable, and the neighbour who connects to your wireless and slips you a fiver every month for the privilege. Nice work, privacy specialists.
(For the record:
