Conversation

Notices

1. Embed this notice
   nixCraft 🐧 (nixcraft@mastodon.social)'s status on Sunday, 01-Dec-2024 16:23:29 JST nixCraft 🐧

   Damn. A Brazilian certificate authority trusted only by Microsoft has issued a presumably-unauthorized certificate for google.com: https://follow.agwa.name/notice/AoZSMI38xcA3TrN1sm

   All security practices in the world are useless if one of the most visited sites such as Google gets a unauthorized TLS certificate issued. How this still exists in 2024 is beyond me.

   • Rich Felker repeated this.
   • Embed this notice
     nixCraft 🐧 (nixcraft@mastodon.social)'s status on Sunday, 01-Dec-2024 16:23:32 JST nixCraft 🐧

     in reply to

     FYI, Chrome and Firefox do not trust this CA but for some reason Windows trust it.

     Rich Felker repeated this.
   • Embed this notice
     John Carlsen 🇺🇸🇳🇱🇪🇺 (johnlogic@sfba.social)'s status on Sunday, 01-Dec-2024 16:23:46 JST John Carlsen 🇺🇸🇳🇱🇪🇺

     in reply to

     @nixCraft

     "Microsoft are well aware of the extensive history of problems with this [certificate authority]... but they clearly don't care. I hope this incident prompts some change; Windows users deserve..."

     I'll fill in the rest:
     ...what they get for continuing to trust and use a third-rate product from a third-rate company.