Comodo, or one of its resellers, has been observed selling certificates without serious domain control checks or other verification. There should be some consideration for removing the impacted CA certificate from ca-certificates and other related packages in the near future, considering the possibility of other fake certificates.
I wish the site above had more details, but obviously a 'how to get your own cert like this' is just asking for trouble.
http:// blog.startcom. org/?p= 145
Comodo, or one of its resellers, has been observed selling certificates without serious domain control checks or other verification. There should be some consideration for removing the impacted CA certificate from ca-certificates and other related packages in the near future, considering the possibility of other fake certificates.
I wish the site above had more details, but obviously a 'how to get your own cert like this' is just asking for trouble.