Google tracks down unauthorized digital certificate, blocks intermediate certificate authority
Google has discovered unauthorized digital certificates being used for several Google domains.
According to a blog on the Google website, the certificates were issued by an intermediate certificate authority (CA) linking back to ANSSI, a French certificate authority.
"Intermediate CA certificates carry the full authority of the CA, so anyone who has one can use it to create a certificate for any website they wish to impersonate," the blog states.
Google immediately updated Chrome's certificate revocation metadata to block the intermediate CA, and then alerted ANSSI and other browser vendors.
"ANSSI has found that the intermediate CA certificate was used in a commercial device, on a private network, to inspect encrypted traffic with the knowledge of the users on that network," the blog states. "This was a violation of their procedures and they have asked for the certificate in question to be revoked by browsers."
Google said the incident "represents a serious breach," and the search engine company is still considering what other actions may need to be taken.
Have a comment on this story? Please click "Add a Comment" below. If you'd like to contact Dark Reading's editors directly, send us a message.
About the Author(s)
You May Also Like
The fuel in the new AI race: Data
April 23, 2024Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024