Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Re-read that sentence. The government agency is the user in this case, not the CA.

  | TURKTRUST [a private company] did not spoof the    
  | .google.com certificate. They accidentally issued
  | an intermediate (chained CA) certificate to a user
  | [a government agency], who happened to be a
  | government agency, and that user [a government
  | agency] accidentally spoofed
  | .google.com.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: