3 ms·
Re-read that sentence. The government agency is the user in this case, not the CA. | TURKTRUST [a private company] did not spoof the | .google.com cert
by pyre 14y ago
Re-read that sentence. The government agency is the user in this case, not the CA.
| TURKTRUST [a private company] did not spoof the
| .google.com certificate. They accidentally issued
| an intermediate (chained CA) certificate to a user
| [a government agency], who happened to be a
| government agency, and that user [a government
| agency] accidentally spoofed
| .google.com.