Rouge CAs and certificate pinning.

A intermediate CA, held by MSC Holdings, issued by CNNIC, the Chinese NIC, apparently issued certificates for unauthorized domains. The problem was detected by Google for their domains through pinned certificates in their browser.

Google Online Security Blog: Maintaining digital certificate security.


Posted

in

by