Another CA compromised, certificates misissued

BoerenkoolMetWorst · Jul 10, 2014

Google Blocks Fake SSL Certificates Issued by Indian Government Agency

Google has blocked unauthorized digital certificates for several Google domains issued by the National Informatics Centre of India (NIC), a unit of India’s Ministry of Communications and Information Technology.
Click to expand...

http://www.thewhir.com/web-hosting-...-certificates-issued-indian-government-agency

Maintaining digital certificate security

On Wednesday, July 2, we became aware of unauthorized digital certificates for several Google domains. The certificates were issued by the National Informatics Centre (NIC) of India, which holds several intermediate CA certificates trusted by the Indian Controller of Certifying Authorities (India CCA).
Click to expand...

Update Jul 9: India CCA informed us of the results of their investigation on July 8. They reported that NIC’s issuance process was compromised and that only four certificates were misissued; the first on June 25. The four certificates provided included three for Google domains (one of which we were previously aware of) and one for Yahoo domains. However, we are also aware of misissued certificates not included in that set of four and can only conclude that the scope of the breach is unknown.
Click to expand...

http://googleonlinesecurity.blogspot.nl/2014/07/maintaining-digital-certificate-security.html

Microsoft Security Advisory 2982792

Microsoft is aware of improperly issued SSL certificates that could be used in attempts to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. The SSL certificates were improperly issued by the National Informatics Centre (NIC), which operates subordinate CAs under root CAs operated by the Government of India Controller of Certifying Authorities (CCA), which are CAs present in the Trusted Root Certification Authorities Store. This issue affects all supported releases of Microsoft Windows. Microsoft is not currently aware of attacks related to this issue.
Click to expand...

https://technet.microsoft.com/en-us/library/security/2982792.aspx[/QUOTE]

ronjor · Jul 10, 2014

https://www.wilderssecurity.com/thr...-digital-certificates-issued-in-india.365868/

https://www.wilderssecurity.com/threads/microsoft-security-advisory-2982792.365931/

Log in or Sign up

Another CA compromised, certificates misissued

BoerenkoolMetWorst Registered Member

ronjor Global Moderator

Log in or Sign up

Another CA compromised, certificates misissued

BoerenkoolMetWorst Registered Member

ronjor Global Moderator

Useful Searches