4 ms·
Wikipedia says "The National Intelligence Law of the People's Republic of China theoretically allows the Chinese government to request and use the root certific
by tgv 2y ago
Wikipedia says "The National Intelligence Law of the People's Republic of China theoretically allows the Chinese government to request and use the root certificate from any Chinese certificate authority,[60] such as CNNIC, to make MITM attacks with valid certificates." [https://en.wikipedia.org/wiki/Great_Firewall#Active_filtering https://en.wikipedia.org/wiki/Great_Firewall#Active_filterin...]
- gruez 2y agoKeyword is "theoretically". Thanks to certificate transparency, such misissuances would be detected relatively quickly, eg. https://news.ycombinator.com/item?id=42284202 https://news.ycombinator.com/item?id=42284202. To my knowledge it hasn't actually happened in practice.