ADVERTISEMENT

Google vs China

The browser maker lowered the boom, citing violations of their respective policies regarding certificates.

Gregg Keizer, a tech expert, during his tech reviews made available  on computerworld reports that The impact of Google's decision to remove the root certificates issued by a Chinese certificate authority could hamper millions of Chrome users, particularly those in China.

That move, which Google will make in a future Chrome update, will put warnings in front of the browser's users, telling them that sites using the root and EV (Extended Validation) certificates issued by CNNIC (China Internet Network Information Center) are not to be trusted. Rather than pull the plug immediately, however, Chrome will continue to trust existing CNNIC-issued certificates "for a limited time."

He also stated that Mozilla will sanction CNNIC, but will not remove the root certificates.

Both browser makers reacted to the discovery last month by Google that CNNIC -- a nonprofit administered by an agency of the Chinese government -- issued an intermediate certificate to an Egyptian company, MCS Holdings. The latter then used its CNNIC-provided certificate to generate unauthorized digital certificates for several Google domains.

ADVERTISEMENT

Although MCS Holdings claimed that its actions were the result of "human error" and Google confirmed it had seen no signs of abuse -- interception of encrypted traffic or a phishing attack, for example -- the two browser makers lowered the boom, citing violations of their respective policies regarding certificates.

JOIN OUR PULSE COMMUNITY!

Unblock notifications in browser settings.
ADVERTISEMENT

Eyewitness? Submit your stories now via social or:

Email: eyewitness@pulse.com.gh

ADVERTISEMENT