Hackers used an https digital certificate to help capture BA customers’ card data
The BA heist exploited the inadequacies of digital certificates' security by using a supposedly trusted https domain, baways.com, to gather users’ card data that had been captured through a Javascript injection.
Not only do the shortcomings of digital certificates leave users with inadequate trust in a counterparty but they are now being actively exploited to defraud them.
How many more users need to be defrauded as a result of the failings of digital certificates before people realise the system is fundamentally broken?
Omlis addresses the security vulnerabilities of digital certificates head-on. To find out more, please get in touch.