Some CAs issue very few certificates, so it is very easy to predict the next serial number that will be used by looking at the last certificate that was issued.
Russ At 11:46 AM 3/3/2005, Sam Roberts wrote:
Wrote Ben Laurie <ben@xxxxxxxxxxxxx>, on Thu, Mar 03, 2005 at 02:54:35PM +0000:> The issue is not the length of the serial number but its predictability. I thought most CAs put some random component into the serial number, and even for ones that just using a simple integer count, it would seem quite difficult to predict the number of the next cert to be issued. So, can anybody describe practical prediction strategies? Cheers, Sam -- Sam Roberts <sroberts@xxxxxxxxxxxx>