3 ms·
> Do I tell the mozilla that "someone issued cert id 4d8effdd25 for my nextcloud installation Basically. You'd send a report to the CA telling them there was a
by dlgeek 9y ago
> Do I tell the mozilla that "someone issued cert id 4d8effdd25 for my nextcloud installation
Basically. You'd send a report to the CA telling them there was a misissuance, and if their answer isn't to your satisfaction, you can report it to Mozilla and the other browsers on the public mailing list, claiming a misissuance by the CA. The browsers would then force the CA to follow up.
- kuschku 9y agoThe CA in question is the German government itself (which happens to be trusted in all browsers). They're almost exclusively used for digital ID servives (and, according to some sources, MitM), and are in browsers anyway. CT won't help with that.
- germanier 9y agoThe BSI is not the/a German police as you know. I don't think any of their certificates is trusted by browsers. The Bundesdruckerei certificate is though but neither are they a police force. Do you have any source for that certificate being used for MitM?
- kuschku 9y agoThe BSI is part of the executive, just as the police or the intelligence agencies, and its certs have been abused for that before. There are a few stories about this in the 2013 Snowden data actually, the SPIEGEL published stories about that back then, too.
- germanier 9y agoI have never heard of any of their certs being abused before and I have followed the Snowden revelations closely. The only thing I know of are some vague "cooperations with the NSA" that never have been described more closely. I don't think they even have a root certificate trusted by browsers. A publicly owned company (the Bundesdruckerei) does, however.
- kuschku 9y agoI have to be honest, I don't care that much about the details on this. I'm far more enraged by the decision of the Bundesdruckerei to not offer on-card signing features for the ePerso anymore. Instead, you have to use their web service to sign, and it costs you even more money. And is obviously ridiculously insecure.
- germanier 9y agoThen please don't go around claiming "the German police has a trusted root CA and has used it for MitM in the past" if you don't actually know that.