5 ms·
Yes, which is how they found out about the fraudulent cert. They went ahead and revoked the entire intermediate CA because Chrome doesn't pin the whole internet
by jonknee 13y ago
Yes, which is how they found out about the fraudulent cert. They went ahead and revoked the entire intermediate CA because Chrome doesn't pin the whole internet and if Google confirmed fraud on their own domain it has to assume there are others.
Chrome's popularity and Google's use of pinning to their own properties is a pretty powerful combination to detect MITM.
- StavrosK 13y ago> Chrome's popularity and Google's use of pinning to their own properties is a pretty powerful combination to detect MITM. Plus the fact that Chrome reports back to Google when it finds a valid certificate that's not the pinned one.
- agl 13y agoNote that we haven't said that pinning found this event. We have several channels by which we receive information about these sorts of things.
- jonknee 13y agoFascinating. I assume that means Chrome wasn't used with the cert otherwise pinning should have been the giveaway.