Mozilla Accepts Chinese CNNIC Root CA Certificate 256
Josh Triplett writes "Last October, Mozilla accepted the China Internet Network Information Center as a trusted CA root (Bugzilla entry). This affects Firefox, Thunderbird, and other products built on Mozilla technologies. The standard period for discussion passed without comment, and Mozilla accepted CNNIC based on the results of a formal audit. Commenters in the bug report and the associated discussion have presented evidence that the Chinese government controls CNNIC, and surfaced claims of malware production and distribution and previous man-in-the-middle attacks in China via their secondary CA root from Entrust. As usual, please refrain from blindly chiming into the discussion without supporting evidence. Since Mozilla has already accepted CNNIC as a trusted root CA, the burden rests with those who argue for its removal."
As usual, please refrain from blindly chiming in? (Score:5, Funny)
Wow, youre so new here, youre still dripping wet and covered in placenta.
Re:Given they've bowed to Chinese pressure (Score:3, Funny)
Edit -> Preferences -> Advanced -> Encryption -> View Certificates -> Authorities -> ... -> Profit
You're kidding, right? (Score:5, Funny)
Re:How do I mark all CAs in Firefox untrusted? (Score:3, Funny)
"Is there an add-on that does this automatically?"
There supposedly is, except its certification is provided by CNNIC...
Re: As usual, please refrain from blindly chiming (Score:3, Funny)
What's a MiTH attack? Man in ..?
Re: As usual, please refrain from blindly chiming (Score:3, Funny)
What's a MiTH attack? Man in ..?
Man in The Hat [xkcd.com]
I'm sorry sir, the certificate is in Chinese (Score:5, Funny)
Why is CNNIC untrustworthy ? In plain English please.
I'm sorry sir, the certificate is in Chinese.
Re: As usual, please refrain from blindly chiming (Score:3, Funny)
Wow, youre so new here, youre still dripping wet and covered in placenta.
And a Chinese, heavy metal laden one, at that.