Changes

== Examples of CA's being compromised before 2021 ==

== Examples of CA's being compromised before 2021 ==

# In 2011, the DigiNotar certificate authority (CA) was compromised, resulting in the issuance of rogue digital certificates for several high-profile domains. This incident highlighted the importance of diversity in the trust infrastructure, as relying on a single CA left the organization vulnerable to attack. <ref>"DigiNotar: Dissecting the First Dutch Digital Disaster", 2013 , https://digitalcommons.usf.edu/jss/vol6/iss2/4/</ref><ref>"Digital Certificate Authority Hacked, Dozens Of Phony Digital Certificates Issued ", 2011, https://www.darkreading.com/attacks-breaches/digital-certificate-authority-hacked-dozens-of-phony-digital-certificates-issued</ref>

# In 2011, the DigiNotar certificate authority (CA) was compromised, resulting in the issuance of rogue digital certificates for several high-profile domains. This incident highlighted the importance of diversity in the trust infrastructure, as relying on a single CA left the organization vulnerable to attack. <ref>"DigiNotar: Dissecting the First Dutch Digital Disaster", 2013 , https://digitalcommons.usf.edu/jss/vol6/iss2/4/</ref><ref>"Digital Certificate Authority Hacked, Dozens Of Phony Digital Certificates Issued ", 2011, https://www.darkreading.com/attacks-breaches/digital-certificate-authority-hacked-dozens-of-phony-digital-certificates-issued</ref>

# 2011-2012, the Comodo certificate authority (CA) was targeted by a phishing attack which resulted in the issuance of rogue digital certificates for several high-profile domains. This incident, similar to the DigiNotar incident, showed the importance of diversity in the trust infrastructure, as relying on a single CA left the organization vulnerable to attack.<ref>"Fraudulent certificates issued by Comodo, is it time to rethink who we trust? ", 2011, https://nakedsecurity.sophos.com/2011/03/24/fraudulent-certificates-issued-by-comodo-is-it-time-to-rethink-who-we-trust/</ref>

# In 2011, the Comodo certificate authority (CA) was targeted by a phishing attack, which resulted in the issuance of rogue digital certificates for several high-profile domains, such as Google, Skype, Yahoo and others. The attacker was able to obtain the private key of the certificate authority, which allowed them to issue fake certificates. This incident highlighted the importance of proper security controls and diversifying the trust infrastructure. Relying on a single CA left the organization vulnerable to attack, as the attacker was able to use the compromised CA to issue fake certificates that were trusted by web browsers and other clients. This incident prompted the industry to review their practices and move towards a more robust trust infrastructure, with multiple CAs in place to reduce the risk of a similar attack occurring.<ref>"Fraudulent certificates issued by Comodo, is it time to rethink who we trust? ", 2011, https://nakedsecurity.sophos.com/2011/03/24/fraudulent-certificates-issued-by-comodo-is-it-time-to-rethink-who-we-trust/</ref>

== Distribution/installation of root CA certificates ==

== Distribution/installation of root CA certificates ==