India's National Informatics Centre Forged Google SSL Certificates

NotInHere (3654617) writes As Google writes on its Online Security Blog, the National Informatics Centre of India (NIC) used its intermediate CA certificate, issued by Indian CCA, to issue several unauthorized certificates for Google domains, allowing it to do Man in the middle attacks. Possible impact however is limited, as, according to Google, the root certificates for the CA were only installed on Windows, which Firefox doesn't use — and for the Chrom{e,ium} browser, the CA for important Google domains is pinned to the Google CA. According to its website, the NIC CA has suspended certificate issuance, and according to Google, its root certificates were revoked by Indian CCA.

Comments

Anybody else think posting AC should be abolished?

[Assmasher]

I've never had a problem with it until the past few years when it has been ritually abused by idiots who can't be bothered to create shill accounts (God knows there's enough of those...) to spout hatred and ugliness.

I'm no sub-continent apologist by any means, but all this anti-India crap is just ridiculous.