3 ms·
Anyone else remember the time the TurkTrust cert was used to mitm Google? https://www.google.se/amp/s/nakedsecurity.sophos.com/2013/01/08/the-turktrust-ssl-ce
by willvarfar 10y ago
Anyone else remember the time the TurkTrust cert was used to mitm Google?
https://www.google.se/amp/s/nakedsecurity.sophos.com/2013/01/08/the-turktrust-ssl-certificate-fiasco-what-happened-and-what-happens-next/amp/ https://www.google.se/amp/s/nakedsecurity.sophos.com/2013/01...
Does Turkey still have a key the gov can use to mitm connections terminating there?
And if so, can someone make instructions in Turkish on how to blacklist the Turkish TLS certs in mainstream browsers so that the gov can't mitm their own citizens?
For that matter, I don't want a Turkish root of trust in my own browser either, but the list of roots in our browsers is so long it's kinda meaningless to start zapping them - I mean, who trusts Verisign anyway?
- rahrahrah 10y agoI've heard about problems with trusting certain certificates. Any suggestion where I can read about these specific matters that you mentioned? Thanks.
- Bombthecat 10y agoMozilla has a Google discussion forum for stuff like that. Just Google stardom and Mozilla discussion:)