News for hackers. Stuff that matters.

A comment on For sale: Trusted root SSL CA signing certificate. Parent comment

Re:For sale: Trusted root SSL CA signing certificate by 0x0 on Saturday February 09, 2013 @03:23PM (#5193870)
But - is there anything inside these certificates that identify to a browser what the "intended purpose" of a given certificate is, and prevents such a CA from being used for MITM attacks? How would a regular browser such as IE or Safari act when presented with a certificate for "bank.example.com" signed by such a CA?
[ Parent | on HN ]
Re:For sale: Trusted root SSL CA signing certificate by tptacek on Saturday February 09, 2013 @03:57PM (#5193980)
Yes: the X.509 nameConstraints field, which modern browsers will read to determine which subdomains are acceptable as subjects for certs signed by the CA.

Earlier today I thought that nameConstraints was ineffective, but it seems to turn out that the problem is mostly limited to Safari.

[ Parent | on HN ]
Re:For sale: Trusted root SSL CA signing certificate by 0x0 on Saturday February 09, 2013 @04:02PM (#5193998)
Hm ok, I guess that makes it less of a big deal, but it still sits funny with me.

I guess all iOS devices are still "vulnerable" to a rogue nameConstrained CA then - assuming they share code with Safari?

[ Parent | on HN ]