Microsoft is making it easier for the Thai government to break web encryption

Minimalist · Jan 26, 2017

The Thai government is looking to take greater control over its citizens' web encryption, according to a new report from Privacy International, and Microsoft is part of the problem.

At issue is the Thai government's root certificate, which is used to verify HTTPS-enabled websites. Windows automatically trusts the certificate, but many competing operating systems do not. Used maliciously, the root certificate could allow the government to smuggle malware into otherwise legitimate pages, or present counterfeit versions of entire websites. Privacy International cites Thailand's history of government surveillance as good reason to be suspicious.
Click to expand...

http://www.theverge.com/2017/1/25/1...nment-surveillance-thai-censorship-encryption

elapsed · Jan 27, 2017

Yet every browser implements its own trust system, so it's not really a problem unless they are using I.E.

Dermot7 · Jan 29, 2017

Privacy International's new investigation "Who's That Knocking At My Door?: Understanding Surveillance In Thailand", shows that Microsoft is likely to be the only internet company whose products by default trust the Thailand national root certificate. This means that people using the internet in Thailand on Microsoft Windows machines, which is the most common operating system in the country, are left vulnerable to the Thai Government manipulating websites, and that the government is potentially able to capture people's log-in details to social media accounts, online banking accounts, and more. No other company has been identified in the research which trusts Thailand's national root certificate by default. Those who do not trust the root certificate by default include Apple, Google Chrome, and Mozilla.
Click to expand...

https://www.privacyinternational.org/node/1347

Log in or Sign up

Microsoft is making it easier for the Thai government to break web encryption

Minimalist Registered Member

elapsed Registered Member

Dermot7 Registered Member

Log in or Sign up

Microsoft is making it easier for the Thai government to break web encryption

Minimalist Registered Member

elapsed Registered Member

Dermot7 Registered Member

Useful Searches