News for hackers. Stuff that matters.

A comment on Challenge HN: Break my in-browser crypto for $1000. Parent comment

Re:Challenge HN: Break my in-browser crypto for $1000 by michael_h on Wednesday May 29, 2013 @03:20PM (#5788463)
Didn't Iran get a valid SSL certificate for *.google.com a while ago?

Edit: Found an article, by cperciva no less: http://www.daemonology.net/blog/2011-09-01-Iran-forged-the-w...

[ Parent | on HN ]
Re:Challenge HN: Break my in-browser crypto for $1000 by marshray on Wednesday May 29, 2013 @04:11PM (#5788770)
Among others. They were using them to conduct targeted and dragnet man-in-the-middle attacks in the country for weeks or months before any users spoke up and browsers were patched.
[ Parent | on HN ]
Re:Challenge HN: Break my in-browser crypto for $1000 by dylz on Thursday May 30, 2013 @07:38PM (#5795963)
If Chrome was involved, it aggressively refuses to use anything but the whitelisted fingerprints and will notify Google if MITM is detected for any high profile hosts.
[ Parent | on HN ]