UPDATE: Google, Mozilla revoke authority of CNNIC after breach of trust
San Francisco, April 2, 2015–The Committee to Protect Journalists welcomes Google’s plan to revoke the authority of root certificates belonging to China Internet Network Information Center (CNNIC) following CNNIC’s major breach of the trust placed in them to underpin global Internet security. Mozilla also said it will not trust any CNNIC certificates dated after April…
China’s CNNIC issues false certificates in serious breach of crypto trust
In a major breach of public trust and confidence, the Chinese digital certificate authority China Internet Network Information Center (CNNIC) certified false credentials for numerous domains, including several owned by Google. The deliberate breach had the potential to seriously endanger vulnerable users, such as journalists communicating with sources. The breach was discovered by Google and…