Home : December 09 2013 Computer News : French government sub-CA issues unauthorized certificates for Google domains |
|
French government sub-CA issues unauthorized certificates for Google domains |
December 09, 2013
An intermediate certificate authority (CA) registered to the French Ministry of Finance issued rogue certificates for several Google domains without authorization.Google detected the use of the unauthorized certificates and launched an investigation Dec. 3, Adam Langley, a security engineer at Google, said Saturday in a blog post.The intermediate CA that issued the rogue certificates linked back to the Agence nationale de la sécurité des systèmes d’information (ANSSI), a French national agency that protects government systems against cyberattacks and also operates the French government’s public key infrastructure and root certificate authority called IGC/A.Web browsers use a chain of certificates to determine if a secure website is authentic. Fake SSL (Secure Sockets Layer) certificates are used by hackers, but they also are sometimes used for internal surveillance purposes that do not have nefarious aims, such as the case with the French Ministry.To read this article in full or to leave a comment, please click here
Link: http://www.pcworld.com/article/2070880/french-government-subca-issues-unauthorized-certificates-for-google-domains.html#tk.rss_all
|
|
|
|
|