Telegram Group & Telegram Channel
微软信任的巴西 CA 签发了 google.com 的证书

2024-12-01 18:24 by 异星战场

巴西的一家政府 CA 机构 ICP-Brasil 被发现签发了 google.com 的证书。Google 和 Mozilla 早已拒绝信任该 CA,而软件巨人是唯一信任该 CA 的主流浏览器开发商,这意味着通过 Edge 或其它微软应用访问 google.com 的流量能被第三方拦截,但 Chrome 和 Firefox 不会。ICP-Brasil 的问题早在 2021 年就被报告并在 2022 年讨论之后被拒绝信任,但微软仍然决定信任它。

https://bugzilla.mozilla.org/show_bug.cgi?id=1934361
https://groups.google.com/a/ccadb.org/g/public/c/Mux855BsRg4/m/MhxJXipVAwAJ?pli=1

#安全



group-telegram.com/solidot/25797
Create:
Last Update:

微软信任的巴西 CA 签发了 google.com 的证书

2024-12-01 18:24 by 异星战场

巴西的一家政府 CA 机构 ICP-Brasil 被发现签发了 google.com 的证书。Google 和 Mozilla 早已拒绝信任该 CA,而软件巨人是唯一信任该 CA 的主流浏览器开发商,这意味着通过 Edge 或其它微软应用访问 google.com 的流量能被第三方拦截,但 Chrome 和 Firefox 不会。ICP-Brasil 的问题早在 2021 年就被报告并在 2022 年讨论之后被拒绝信任,但微软仍然决定信任它。

https://bugzilla.mozilla.org/show_bug.cgi?id=1934361
https://groups.google.com/a/ccadb.org/g/public/c/Mux855BsRg4/m/MhxJXipVAwAJ?pli=1

#安全

BY Solidot


Warning: Undefined variable $i in /var/www/group-telegram/post.php on line 260

Share with your friend now:
group-telegram.com/solidot/25797

View MORE
Open in Telegram


Telegram | DID YOU KNOW?

Date: |

"We're seeing really dramatic moves, and it's all really tied to Ukraine right now, and in a secondary way, in terms of interest rates," Octavio Marenzi, CEO of Opimas, told Yahoo Finance Live on Thursday. "This war in Ukraine is going to give the Fed the ammunition, the cover that it needs, to not raise interest rates too quickly. And I think Jay Powell is a very tepid sort of inflation fighter and he's not going to do as much as he needs to do to get that under control. And this seems like an excuse to kick the can further down the road still and not do too much too soon." Since January 2022, the SC has received a total of 47 complaints and enquiries on illegal investment schemes promoted through Telegram. These fraudulent schemes offer non-existent investment opportunities, promising very attractive and risk-free returns within a short span of time. They commonly offer unrealistic returns of as high as 1,000% within 24 hours or even within a few hours. And while money initially moved into stocks in the morning, capital moved out of safe-haven assets. The price of the 10-year Treasury note fell Friday, sending its yield up to 2% from a March closing low of 1.73%. "He has kind of an old-school cyber-libertarian world view where technology is there to set you free," Maréchal said. In this regard, Sebi collaborated with the Telecom Regulatory Authority of India (TRAI) to reduce the vulnerability of the securities market to manipulation through misuse of mass communication medium like bulk SMS.
from in


Telegram Solidot
FROM American