Re:Mozilla takes action to protect users in Kazakhstan
by dredmorbius on Wednesday August 21, 2019 @01:00PM
(#20759069)
Though not the US, the Dutch firm DigiNotar's root cert was blacklisted following blatant misuse.
Run by VASCO, the certificate was used to issue fraudulent certificates principally in Iran, though the company also issued certificates used by the Dutch government.
The CA was taken over by the Dutch government prior to being shut down entirely in bankruptcy proceedings. Over 10,000 client companies were affected.
VASCO was spun off to the Chicago, USA, based OneSpan.
Browser developers have specific expertise and interest in monitoring CAs, and have developed processes for identifying, resolving, or acting on misuse or abuse which individual systems operators cannot be expected to replicate.
Run by VASCO, the certificate was used to issue fraudulent certificates principally in Iran, though the company also issued certificates used by the Dutch government.
The CA was taken over by the Dutch government prior to being shut down entirely in bankruptcy proceedings. Over 10,000 client companies were affected.
VASCO was spun off to the Chicago, USA, based OneSpan.
https://en.wikipedia.org/wiki/DigiNotar
https://en.wikipedia.org/wiki/OneSpan
Browser developers have specific expertise and interest in monitoring CAs, and have developed processes for identifying, resolving, or acting on misuse or abuse which individual systems operators cannot be expected to replicate.