4 ms·

Wrong, it is not a government agency. It is privately held and run as CA with the permission given by the government.

• geofft 14y ago
  Read the article (or any of the other ones). TURKTRUST did not spoof the .google.com certificate. They accidentally issued an intermediate (chained CA) certificate to a user, who happened to be a government agency, and that user accidentally spoofed .google.com.
  • alpb 14y ago
    Title says government agency did, not the user. The problem is with the title.
    • deleted 14y ago
      [deleted]
    • pyre 14y ago
      Re-read that sentence. The government agency is the user in this case, not the CA. | TURKTRUST [a private company] did not spoof the | .google.com certificate. They accidentally issued | an intermediate (chained CA) certificate to a user | [a government agency], who happened to be a | government agency, and that user [a government | agency] accidentally spoofed | .google.com.