2 ms·
> Oh? Then why did Firefox, Google, Microsoft, Apple, etc. trust their root certificate? Mozilla no longer trust CNNIC. https://blog.mozilla.org/security/2015
by est 12y ago
> Oh? Then why did Firefox, Google, Microsoft, Apple, etc. trust their root certificate?
Mozilla no longer trust CNNIC.
https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/ https://blog.mozilla.org/security/2015/04/02/distrusting-new...
- andreyf 12y agoYes, hence my using the past tense. I do not see how "CNNIC is [not trustworthy]" is compatible with "Firefox, Google, Apple, and Microsoft trusted their certificates until MCS Holding screwed up some corporate network's https-interception implementation". In particular, was there any evidence of any mis-deeds by the CNNIC before what MCS Holding did? Anything at all aside from "they are a Chinese and that is bad" FUD? Have they ever issued a certificate used to MITM the communications of political dissidents, for example?