3 ms·
Let's not start cheering just yet. Initially, the government failed to acknowledge the seriousness of the issue, even though browser manufactures revoked trust
by rickmb 15y ago
Let's not start cheering just yet. Initially, the government failed to acknowledge the seriousness of the issue, even though browser manufactures revoked trust in the CA. In fact, they successfully pressured Mozilla into accepting Dutch government certificates as trustworthy anyway.
It also kept all public services depending on Diginotar certificates operational, basically telling the public "well, you can't trust them, but feel free to use them anyway".
- joelhaasnoot 15y agoThey started with this, but ended differently: Friday September 2nd they had a news conference and basically said "for now, it's insecure". DigiD, which is what most consumers will see, had a message saying it couldn't be trusted, till the certificates were replaced sometime saturday or sunday. The timing is a little suspicious though: can imagine they didn't want to do that till the weekend, when not as many business cared, or journalists were around to cover all the details.
- yuhong 15y agoFrom http://news.ycombinator.com/item?id=2962964 http://news.ycombinator.com/item?id=2962964: "EDIT: Oh, and there's a good reason why the DigiNotar PKIOverheid is now also rejected. The Government cert business was supposed to be on a seperate network, on computers (or data?) stored in a safe. However, there were links between the normal network and the secondary (government) network."