3 ms·

Telekom ( actually T-Online, the German ISP branch). The certificate is identified as T-Systems (and I just found another one, Deutsche Telekom AG). Additionall

by yk 14y ago

Telekom ( actually T-Online, the German ISP branch). The certificate is identified as T-Systems (and I just found another one, Deutsche Telekom AG). Additionally looking through the certificates I found at least Swisscom who appear to have both a CA and an ISP, and AOL. But this is certainly not an exhaustive list but just the ones that caught my eye scrolling through the list of CAs. [EDIT]And for the added 'told you so,' the German parliament uses precisely this certificate https://www.bundestag.de/ https://www.bundestag.de/

wyager 14y ago
I always go through and delete government and ISP certs from my computer's cert store. On OS X, you can do this from Keychain Access.
- raverbashing 14y ago
  If you don't need secure access to gov websites this is nice In my case it was the opposite, a gov website mandated the installation of certificates for its use
cheald 14y ago
Well, you can at least remove those from the trusted cert list manually, but it seems like insanely bad juju for ISPs to have their CAs installed with the browser. I wonder if that's worth opening a bug on the Firefox tracker.
- jlgaddis 14y ago
  Well, considering Mozilla is who put them in there ...
cheald 14y ago
Here's where it was introduced: https://bugzilla.mozilla.org/show_bug.cgi?id=378882 https://bugzilla.mozilla.org/show_bug.cgi?id=378882 Interesting comment on that thread: > This CA was singled out as a CA that signed an excessive number of intermediate authorities (252) which together only have issued 4164 certificates in EFFs talk at C3. This is, by far, the highest number, the next contender is GTE Cybertrust with 93.
- yk 14y ago
  The bugzilla thread is an interesting read. And to be fair, the issue with the thousands of certificates is explained in it. It appears that the certificate is used to sign DFN, which in turn signs certificates for most German universities. Btw, Video of the 27C3 talk in question: https://www.youtube.com/watch?v=DRjNV4YMvHI https://www.youtube.com/watch?v=DRjNV4YMvHI
- smackfu 14y ago
  Wow, reading through that bug makes me glad I never have to deal with Mozilla for anything time sensitive.

by yk 14y ago

wyager 14y ago

I always go through and delete government and ISP certs from my computer's cert store. On OS X, you can do this from Keychain Access.

raverbashing 14y ago
If you don't need secure access to gov websites this is nice In my case it was the opposite, a gov website mandated the installation of certificates for its use

cheald 14y ago

Well, you can at least remove those from the trusted cert list manually, but it seems like insanely bad juju for ISPs to have their CAs installed with the browser. I wonder if that's worth opening a bug on the Firefox tracker.

jlgaddis 14y ago
Well, considering Mozilla is who put them in there ...

cheald 14y ago

Here's where it was introduced: https://bugzilla.mozilla.org/show_bug.cgi?id=378882 https://bugzilla.mozilla.org/show_bug.cgi?id=378882 Interesting comment on that thread: > This CA was singled out as a CA that signed an excessive number of intermediate authorities (252) which together only have issued 4164 certificates in EFFs talk at C3. This is, by far, the highest number, the next contender is GTE Cybertrust with 93.

yk 14y ago
The bugzilla thread is an interesting read. And to be fair, the issue with the thousands of certificates is explained in it. It appears that the certificate is used to sign DFN, which in turn signs certificates for most German universities. Btw, Video of the 27C3 talk in question: https://www.youtube.com/watch?v=DRjNV4YMvHI https://www.youtube.com/watch?v=DRjNV4YMvHI
smackfu 14y ago
Wow, reading through that bug makes me glad I never have to deal with Mozilla for anything time sensitive.