Slashdot Mirror
Google Let Root Certificate For Gmail Expire
Gr8Apes writes: The certificate for Google's intermediate certificate authority expired Saturday. The certificate was used to issue Gmail's certificate for SMTP, and the expiration at 11:55am EDT caused many e-mail clients to stop receiving Gmail messages. While the problem affected most Gmail users using PC and mobile mail clients, Web access to Gmail was unaffected. I guess Google Calendar failed to notify someone.
Yeah I only use Tinder for all my communication.
This seems so prophetic now:
Obligatory XKCD Link
How come Slashdot never gets Slashdotted?
Lol, I write my patches 160 characters at a time, now to figure out why nothing has been merged...
As it seems even tech giant google gets it wrong with its own certs. Lets hope that Let's Encrypt will make these problems of yesterday one day.
because you should never sign a cert that has an expiration date later that that of the signing cert !
and I just transferred one of my sites to Google domains hmmmm
I am GRoot.
Lost at C:>. Found at C.
Their DNS has been shitting itself recently as well.
I noticed intermittent problems with it over the past few days, so disabled it.
Damn it Google, what're ya doin?!
I usually figure out that a cert has expired when something breaks. For example, I like to use free certs from StartSSL on Exchange Servers. When they expire, people get warnings when accessing OWA, or smartphones stop connecting.
If it happens to be on an SBS Server it can really be a pain, however, since it will stop working as a Terminal Services Gateway, making it difficult to log back on and replace the cert.
The article summary doesn't pass the mother test. i.e. If you can't explain the topic to your mother, the summary is not plain enough, and not descriptive enough.
* How does this a normal user?
* What can they or not do now?
* What do they have watch out for?
On /. Tuesday. Must not be such a big deal otherwise it would have been posted sooner....probably was noticed when that one person who uses google+ tried to make a post.
I just don't see Google slipping up by "forgetting" (how can you excuse that in this day and age?)
I think something else happened.
"If any question why we died, Tell them because our fathers lied."
bahahahaha
You'd think a company the size of google would have a full time employee dedicated to renewing domain names, certificates and other digital subscriptions of great importance.
Website Just Down For Me? Find out
When we bought our $50k accounting system some years ago we went to Colorado for the training class.
The license had expired on the in-house training system, not noticed til we sat down to train, and it took their tech an hour to get around it :) Ooops
They did it right in front of me...so much for security.
One would think you could manage to keep the system up to date when you are BOTH the vendor AND the customer....hehe
The certificate was used to issue Gmail's certificate for SMTP, and the expiration at 11:55am EDT caused many e-mail clients to stop receiving Gmail messages
If the certificate was "for SMTP", the problem would have affected not just end users, but also peers, i.e. other e-mail providers who wanted to deliver mail to @gmail.com addresses. Or at least they may have automatically fallen back to unencrypted SMTP delivery (which was pretty much the default before Snowden, but anyway).
"Google Internet Authority G2" is NOT a root certificate (subject != issuer).
From my experience dealing with Microsoft Exchange administrators, this comes as no surprise.
However, when people running high-performance, FOSS mailservers forget to get fresh certs before the old ones expire they are ridiculed and many even lose their jobs. There's a higher level of competence expected, I guess.
Lies. You use grinder, faggot.
It's Grindr Troll.
wonkey_monkey, I'm guessing you are actually wonkey_human.
Yes, I think I have an explanation. Google has been degrading rapidly. More and more Google is out of control. To me, that is very sad. For years, Google was an amazingly excellent company.
The Google traffic map near Portland, Oregon shows traffic accidents in Seattle, 3 hours away. The design of the text in the upper left corner of Google maps is very poor.
There are many other issues of that nature.
The message I get is: "we don't like when you use a mail client to access gmail, we'd rather prefer the web interface, potentially monitoring your behavior down to the keypress and the time before you scroll past that pic, and not letting you store the content on your PC by default. So let's start by not caring about that cert expiration, let's see what the public reactions are."
---- MISSING MISCELLANEOUS DATA SEGMENT --- [sigdash] trolololol
Thus proving my point.
Sorry, I know this is a really basic question, but a quick Google search didn't turn up any satisfying answers.
The question is: why is it useful to have certificates expire after a particular amount of time? Isn't that similar to writing a program that contains a bug that will cause it to automatically stop working in (so many months/years)?
The only reason I can think of is that if the certificate was compromised this would make sure that people eventually stopped using it; OTOH if the certificate is compromised you'd want people to stop using it immediately, not wait (however many) months/years before stopping; so presumably this wouldn't be a sufficient mechanism to handle that use case anyway.
I don't care if it's 90,000 hectares. That lake was not my doing.
Shouldn't you be hanging out in the men's bathroom or voting against marriage equality, senator?
This is all Eric Schmidt (Schmidt as in Shit).
The best thing in the next 48 hours for Google is that Eric "Schmidt" j-walks and gets dis-embodyed by a Budweiser Beer Truck.
Yes! Miracles Can Happen. YES!
Ha ha
What is equality? Can all humans be perfectly equal? Why do you ask such things of people to be?
And it's not that of a big deal anyways since this mishap occurred conveniently on your last day @ the job.
Yup, my OSX Mail app informed me of that as well. It simply asked me if I wanted to continue. I assumed there was some kind of server problem accessing the certificates. After all, Google couldn't possibly be that incompetent as to let their certs expire. It used to be a common event back in the day, when Netscape 4 was current, that certs would expire all the time. But not now. Too busy snooping in on everyone else , I guess, to bother to check at home..
Ha looking for friends lol