A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

Post by AceJohnny2 » Mon, Dec 02, 2024, 2:15 AM UTC

0xbadcafebee wrote: post #208

Lol. "This is pretty bad. Someone circunvented the ban on emitting public certificates but also disrespected Google's CAA rules. Hope this CA gets banned on Microsoft OSes for good." Yeah, this is after the certificate was issued, and my guess, used. Also, has anyone tried to look up CT logs lately? I tried. Can get maybe a single FQDN if you look, but trying to do wildcards or name-alikes, nothing worked. Most of th…

Post by numbsafari » Mon, Dec 02, 2024, 2:27 AM UTC

0xbadcafebee wrote: post #208

Lol. "This is pretty bad. Someone circunvented the ban on emitting public certificates but also disrespected Google's CAA rules. Hope this CA gets banned on Microsoft OSes for good." Yeah, this is after the certificate was issued, and my guess, used. Also, has anyone tried to look up CT logs lately? I tried. Can get maybe a single FQDN if you look, but trying to do wildcards or name-alikes, nothing worked. Most of th…

Post by doubled112 » Mon, Dec 02, 2024, 2:36 AM UTC

AceJohnny2 wrote: post #211

0xbadcafebee wrote: post #208

Lol. "This is pretty bad. Someone circunvented the ban on emitting public certificates but also disrespected Google's CAA rules. Hope this CA gets banned on Microsoft OSes for good." Yeah, this is after the certificate was issued, and my guess, used. Also, has anyone tried to look up CT logs lately? I tried. Can get maybe a single FQDN if you look, but trying to do wildcards or name-alikes, nothing worked. Most of th…

> We could fix it but nobody gives a shit. Just apathy and BAU. We really can't fix it. You try and coordinate updates across all major (and most minor, and outdated) OSs, and websites around the world, amateur & professional, from the mom-and-pop store who don't understand any of this, to the big bank that'll take 3 years of procedure. I have friends who work in the CA field (on the OS side). The level of alcoholism…

Post by [deleted] » Mon, Dec 02, 2024, 2:38 AM UTC

AceJohnny2 wrote: post #211

0xbadcafebee wrote: post #208

Lol. "This is pretty bad. Someone circunvented the ban on emitting public certificates but also disrespected Google's CAA rules. Hope this CA gets banned on Microsoft OSes for good." Yeah, this is after the certificate was issued, and my guess, used. Also, has anyone tried to look up CT logs lately? I tried. Can get maybe a single FQDN if you look, but trying to do wildcards or name-alikes, nothing worked. Most of th…

> We could fix it but nobody gives a shit. Just apathy and BAU. We really can't fix it. You try and coordinate updates across all major (and most minor, and outdated) OSs, and websites around the world, amateur & professional, from the mom-and-pop store who don't understand any of this, to the big bank that'll take 3 years of procedure. I have friends who work in the CA field (on the OS side). The level of alcoholism…

Post by thayne » Mon, Dec 02, 2024, 2:45 AM UTC

0xbadcafebee wrote: post #208

Lol. "This is pretty bad. Someone circunvented the ban on emitting public certificates but also disrespected Google's CAA rules. Hope this CA gets banned on Microsoft OSes for good." Yeah, this is after the certificate was issued, and my guess, used. Also, has anyone tried to look up CT logs lately? I tried. Can get maybe a single FQDN if you look, but trying to do wildcards or name-alikes, nothing worked. Most of th…