News for hackers. Stuff that matters.
Re:China Internet Network Information Center accepted as a M... by tarkin2 on Tuesday February 02, 2010 @03:26PM (#1095973)
CNNIC would only ever see the public key, and you can't decrypt encrypted data using the public key--you must use the private key to decrypt the data, something CNNIC would not see--so no.

As mentioned, CNNIC's inclusion only allows a Man In The Middle Attack. That is, CNNIC, i.e. the Chinese government, pretending to be a site they're not, and using their status as a Firefox (and other) -authorised root certificate provider to further trick the user into accepting the bogus SSL certificate as originating from the hijacked domain.

Re:China Internet Network Information Center accepted as a M... by AndrewHampton on Tuesday February 02, 2010 @03:55PM (#1096071)
OK, thanks for the explanation.