If you ask any security expert if PKI is 100% safe, the answer would be a big NO - there are a few concerns that are raised by security experts from time to time. I will begin by looking at the management of CA certificates and private keys. The internet is full of billions of websites and services, and so there are multiple certificate authorities. Rolling out new standards takes many years since this affects the whole security ecosystem.
As a system, PKI is nothing but mathematics. Once someone cracks the formula, a new formula will be introduced to the industry, which looks stronger and more secure. But for how long would this be the case? Another major issue comes with securing private keys. The normal scenario is ...
