New Malware for Mac

Thanks for the information. The co-worker had no idea how it was supposed to work. He thought he had to download and install a driver for the USB card dongle but Windows 10 just installed it using it's drivers. We have it working but it is annoying to have to keep click advanced and telling Chrome to access the site even though it reads it as unencrypted. You would think the site would have encryption too.

Lisa

Chrome, like any other browsers, is looking for SSL connection in this case that's not there. Should there be? I don't know, one is six and the other is half a dozen in this case. As long as the connection is encrypted by other means, in this case via PKI, it should be just fine. SSL connections have the man-in-the-middle attack that is mitigated by the PKI secured connection. In addition, PKI provides positive ID for the end user that is easier to log, or rather evaluate, than the SSL connection.

The access to the public and private keys on the card must be secured pretty good. Otherwise, one could swipe both of them and steal them, together with the PIN, via the man-in-the-browser attack. I am pretty certain that they are locked down, but I didn't look in to the inner working of the CAC, or Common Access Card...