4 ms·
I wonder what prevents them to order TurkTrust to issue ssl sertificates to do this kind of attack to the secure websites. Turkey recently has gained power to t
by buraktamturk 9y ago
I wonder what prevents them to order TurkTrust to issue ssl sertificates to do this kind of attack to the secure websites. Turkey recently has gained power to take over companies, if they don't comply with their order (temporary, State-of-emergency law). I think they had issued a certificate to *.google.com before: https://nakedsecurity.sophos.com/2013/01/08/the-turktrust-ssl-certificate-fiasco-what-happened-and-what-happens-next/ https://nakedsecurity.sophos.com/2013/01/08/the-turktrust-ss...
edit: Ankara was the target. Like this one.
- Sephr 9y agoNothing at all, and CAA doesn't help solve the problem either unfortunately. Even when it comes to CAs that voluntarily adopted CAA, their implementations have silently failed on occasion. See https://www.net.in.tum.de/fileadmin/bibtex/publications/papers/caa17.pdf https://www.net.in.tum.de/fileadmin/bibtex/publications/pape...