3 ms·
Google cares that governments aren't man-in-the-middling their web browser when talking to their online services. That's how the DigiNotar breach was publicly
by marshray 15y ago
Google cares that governments aren't man-in-the-middling their web browser when talking to their online services.
That's how the DigiNotar breach was publicly disclosed. The browser/CA CAB forum knew about it and had been hiding it for weeks until an actual Chrome user posted a message in the Gmail support forum: https://www.google.com/support/forum/p/gmail/thread?tid=2da6158b094b225a&hl=en https://www.google.com/support/forum/p/gmail/thread?tid=2da6...
- 0x12 15y ago> The browser/CA CAB forum knew about it and had been hiding it for weeks That's really criminal.
- mypov 15y ago.. which perhaps calls for collectively mette punishment.
- eggdude 15y agoDigiNotar knew about and hid the attack. I don't believe there is any evidence that the CA/Browser Forum knew about the attack until it was made public.
- marshray 15y agoRight. Well the attacks (and emergency revocations) go back at least to March with Comodo. Vasco/Diginotar had auditors and outside security consultants in June. Maybe not CAB Forum per se, but I'm not so sure I believe that no one was notified of anything. There are likely some serious contractual disclosure obligations there, perhaps even criminal WRT the Dutch government.