Slashdot Mirror


Server Snafu Makes Microsoft Beg For CA Audit Data From Its Partners (softpedia.com)

An anonymous reader writes: Microsoft, just like Google, Apple, and Mozilla, is part of the CA/BForum, an organization of web browser vendors and certification authorities (CAs). As a browser vendor, Microsoft maintains a list of authorized CAs and their respective root certificates. According to a message on the CA/BForum, there was an error on the server that was running a CRM application that managed this list of trusted certificates and the adjacent details regarding each certificate and CA. The data is lost forever and Microsoft is now asking CAs to resend their most recent audits. Currently a lot of certs are broken in Edge and IE. Microsoft says that it lost audit data for 147 root certificates, which resulted in many SSL/TLS certificates showing errors inside the company's products.

3 of 115 comments (clear)

  1. wtf by lastman71 · · Score: 5, Interesting

    Seriously. No backup?

    1. Re:wtf by Forever+Wondering · · Score: 4, Insightful

      Seriously. No backup?

      Maybe they used Azure for their backup ...

      --
      Like a good neighbor, fsck is there ...
    2. Re:wtf by Anonymous Coward · · Score: 5, Insightful

      This might be the correct explanation. I have seen the technology management to actually trust on their "the cloud is the backup" fairytale. And then we lost data multiple times thanks to software or administration errors which deleted the data from all replicates. After fourth data loss the dumb ass management started to plan a real write-only backup system. Thankfully I don''t work on that company anymore as the management is still there planning for their next failures.