English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1
Latest posting
By rating
By popularity

Join our blog

You can contribute to our blog if you have +100 points. Comment on articles and blogposts, and other users will rate your comments. You receive points for positive ratings.

Incidents|The bigger issue with the rogue Google SSL cert

Roel
Kaspersky Lab Expert
Posted August 30, 11:52  GMT
Tags: Google, EMC
0.5
 

Today we saw the discovery of another rogue SSL certificate - this time for *.google.com. The certificate itself was issued five weeks ago. This will allow an attacker to sniff the traffic to virtually all of Google's services even with HTTPS enabled.

Right now, there's an unconfirmed report this attack is happening in Iran. Frankly, I'm not sure it's really relevant.

Given the number of companies that sell government equipment that enables them to inject certificates onto the wire, this is not restricted to any particular part of the world. However, those countries without their own CA will always be forced to take the route of compromising a Certificate Authority.

The bigger issue here is the Certificate Authority that got compromised. DigiNotar is a Dutch company which was acquired by Vasco earlier this year. Vasco - which amongst other things delivers services similar to RSA's SecurID - is a very big player on the financial market. Meanwhile DigiNotar is especially strong with governments.