Abstract: A system includes determination of first public key certificate policies based on first data files, generation of a first public key certificate conforming to the first public key certificate policies, storage of the first public key certificate in a secret store system, reception of a second public key certificate, determination of second public key certificate policies based on second data files stored in the secret store system, determination of whether the received second public key certificate conforms to the second public key certificate policies, and storage of the second public key certificate in the secret store system if it is determined that the received second public key certificate conforms to the second public key certificate policies.

Abstract: A system includes determination of first public key certificate policies based on first data files, generation of a first public key certificate conforming to the first public key certificate policies, storage of the first public key certificate in a secret store system, reception of a second public key certificate, determination of second public key certificate policies based on second data files stored in the secret store system, determination of whether the received second public key certificate conforms to the second public key certificate policies, and storage of the second public key certificate in the secret store system if it is determined that the received second public key certificate conforms to the second public key certificate policies.

Abstract: Embodiments are directed to detecting and preventing phishing attacks. In one scenario, a computer system accesses a message and analyzes content in the message to determine whether a link is present. The link has a link destination and at least some text that is designated for display in association with the link (i.e. the anchor), where the text designated for display indicates a specified destination. Then, upon determining that a link is present in the message, the computer system determines whether the link destination matches the destination specified by the text designated for display and, if it determines that the destination specified by the text designated for display does not match the link destination, the computer system flags the message to indicate that the message includes at least one suspicious link.