4 ms·
Because no other country yet required their citizens to install root certificate, which the browsers can block. (Speaking of China, Google did remove Chinese C
by dchest 7y ago
Because no other country yet required their citizens to install root certificate, which the browsers can block.
(Speaking of China, Google did remove Chinese CA after it was used for MiTM https://security.googleblog.com/2015/03/maintaining-digital-certificate-security.html https://security.googleblog.com/2015/03/maintaining-digital-...)
- MaxBarraclough 7y agoIn the interests of precision: nothing there says it was the doing of the Chinese state. A private company, MCS Holdings, was at fault there.
- codedokode 7y agoIt doesn't matter who ordered to issue a certificate, a CA must not issue fake certificates anyway and discovery of such a certificate is a proof of violation of rules.