Re:Improved Digital Certificate Security
by andreyf on Sunday September 20, 2015 @11:48AM
(#10247936)
CNNIC did not mis-use or mis-issue certs, but issued a cert to an Egyptian company which mis-used it, iirc.
[ Parent
| on HN ]
Re:Improved Digital Certificate Security
by MichaelGG on Sunday September 20, 2015 @03:47PM
(#10248760)
Uh, issuing a CA cert to the Egyptian company was the very definition of mis-issuing a cert!
Re:Improved Digital Certificate Security
by andreyf on Tuesday September 22, 2015 @01:30PM
(#10260165)
No, the definition of mis-issuing a cert is when you issue a Google cert to someone who isn't Google. Not doing due diligence on what people to whom you've issued a cert are doing with it is a little different.
This is just semantics, though. I think everyone agrees they done bad.