"We urgently need to start reinforcing the system that is currently used to authenticate and identify secure websites and e-mail systems, " said Mr Eckersley.

BBC: Iran accused in 'dire' net security attack