This flaw is a perfect example of why moving to a 100% encrypted internet won't keep all internet traffic secure and private. To be effective, encryption must be used only...
Continue Reading with trusted digital certificates. But, even in large organizations with significant security investments, this is rarely the case. This flaw illustrates the primary role trusted certificates, which act like identities for machines, play in internet security. If you are using a valid, trusted certificate then Krack isn't a problem. But a quick look at the number of certificates being used for fraudulent activities is a stark reminder that there are a lot of untrusted certificates out there. And, to make matters worse, it's nearly impossible for users to determine which of them should be trusted and which should not. Kevin Bocek, chief security strategist for Venafi