News for hackers. Stuff that matters.

A comment on Google disables SSL search at BT’s request.

Re:Google disables SSL search at BT’s request by cbr on Wednesday November 19, 2014 @06:24PM (#8633377)
Looking at that transcript, the redirection from https://www.google.co.uk/... to http://www.google.co.uk/... does appear to be served by Google. It's over HTTPS so it's signed by a key only Google has.
[ Parent | on HN ]
Re:Google disables SSL search at BT’s request by cortesoft on Wednesday November 19, 2014 @06:31PM (#8633418)
Or by a CA that is trusted by your browser....
[ Parent | on HN ]
Re:Google disables SSL search at BT’s request by cbr on Wednesday November 19, 2014 @07:20PM (#8633655)
That would be a huge scandal. When fraudulently issued certs are discovered that's news, and if you did get one issued you wouldn't use it to redirect random BT customers to http.
[ Parent | on HN ]
Re:Google disables SSL search at BT’s request by kalleboo on Wednesday November 19, 2014 @07:43PM (#8633751)
Unless you're in Chrome or Firefox in which Google's certificates are pinned
[ Parent | on HN ]