4 ms·
If so, it'll likely be much harder to detect as Lenovo could just have Google's CA sign their cert instead of creating their own (untrusted) CA.
by jlgaddis 11y ago
If so, it'll likely be much harder to detect as Lenovo could just have Google's CA sign their cert instead of creating their own (untrusted) CA.
- quantumpotato_ 11y agoWhich is a reminder to us all that the Certificate "Authority" system is broken..
- bitL 11y ago..by design
- magicalist 11y agoIf that had been the issue, they could have gotten the superfish certificate signed by anyone. You don't exactly need an inside man to get an SSL cert these days.