11 ms·
The consensus seems to be that Iran is poisoning intra-country connections to attach this certificate to gmail.com instead of the real certificate, so this woul
by cookiecaper 15y ago
The consensus seems to be that Iran is poisoning intra-country connections to attach this certificate to gmail.com instead of the real certificate, so this would only be occurring where Iran controlled the network infrastructure. Since the certificate is signed by a trusted CA, no warning is provided to the user that the certificate may be unsafe.
GMail still shows a certificate issued by Thawte for me (in the USA).
- VladRussian 15y ago>The consensus seems to be that Iran is poisoning intra-country connections more precisely they can poison any traffic (CA-ed by Diginotar) that passes through the routers/wires under Iran's control, that can be anything what they have already hacked into before as well as just redirected traffic using BGP similar like this http://www.washingtontimes.com/news/2010/nov/15/internet-traffic-was-routed-via-chinese-servers/ http://www.washingtontimes.com/news/2010/nov/15/internet-tra... Btw, aren't China and Iran collaborating usually? There is potential for synergy.