In the latest security lapse involving the Internet’s widely used encryption system, Google said unauthorized digital certificates have been issued for several of its domains and warned misissued credentials may be impersonating other unnamed sites as well. The bogus transport layer security certificates are trusted by all major operating systems and browsers, although a fall-back mechanism known as public key pinning prevented the Chrome and Firefox browsers from accepting those that vouched for the authenticity of Google properties, Google security engineer Adam Langley wrote in a blog post published Monday . The certificates were issued by Egypt-based MCS Holdings , an intermediate certificate authority that operates under the China Internet Network Information Center (CNNIC). The Chinese domain registrar and certificate authority, in turn, is included in root stores for virtually all OSes and browsers. The issuance of the unauthorized certificates represents a major breach of rules established by certificate authorities and browser makers. Under no conditions are CAs allowed to issue certificates for domains other than those legitimately held by the customer requesting the credential. In early 2012, critics blasted US-based CA Trustwave for doing much the same thing and Langley noted an example of a France-based CA that has also run afoul of the policy. Read 6 remaining paragraphs | Comments
Read More:
Google warns of unauthorized TLS certificates trusted by almost all OSes
Construction teams around the world rely on bitumen—an incredibly sticky by-product of crude oil production—as the main binding agent for asphalt. But a team of scientists reckon that a compound found within plants could help replace it, making road-building a greener, more sustainable practice. Read more…
Earlier this week, we heard billionaire entrepreneur Elon Musk describe his vision for the future of self-driving vehicles. Turns out, when Musk said “we’ll be there in a few years, ” what he actually meant was, his company, Tesla, will be there this summer. Slip of the tongue. Read more…
If you thought $10 was highway robbery when it comes to apps, this colorful infographic should help put things in perspective. Read more…