←back to thread

A Brazilian CA trusted only by Microsoft has issued a certificate for google.com

(follow.agwa.name)
482 points sanqui | 2 comments | 30 Nov 24 21:35 UTC | HN request time: 0.434s | source
Show context
sabbaticaldev ◴[01 Dec 24 01:37 UTC] No.42285451[source]▶
Can someone explain what could be done with that and by whom?
replies(4): >>42285493 #>>42285508 #>>42285512 #>>42286140 #
1. 77pt77 ◴[01 Dec 24 01:50 UTC] No.42285508[source]▶
Whoever has the private certificate can pretend to be google.com to people using windows.

The brower (possibly only edge) and system would show the connection as being secure.

replies(1): >>42285709 #
2. ◴[01 Dec 24 02:38 UTC] No.42285709[source]▶