4 ms·
Didn't Iran get a valid SSL certificate for *.google.com a while ago? Edit: Found an article, by cperciva no less: http://www.daemonology.net/blog/2011-09-01-I
by michael_h 13y ago
Didn't Iran get a valid SSL certificate for *.google.com a while ago?
Edit: Found an article, by cperciva no less: http://www.daemonology.net/blog/2011-09-01-Iran-forged-the-wrong-SSL-certificate.html http://www.daemonology.net/blog/2011-09-01-Iran-forged-the-w...
- marshray 13y agoAmong others. They were using them to conduct targeted and dragnet man-in-the-middle attacks in the country for weeks or months before any users spoke up and browsers were patched.
- dylz 13y agoIf Chrome was involved, it aggressively refuses to use anything but the whitelisted fingerprints and will notify Google if MITM is detected for any high profile hosts.