The Indian Controller of Certifying Authorities (India CCA) has launched an investigation into the issue of unauthorized digital certificates to Google by the National Informatics Center Certifying Authority. Such a certificate could have been used to trick a service into thinking that a fake domain was legitimate.
In a blog post on its security blog, Google has stated that the unauthorized certificates were included in Microsoft's Root Store, meaning that a majority of Windows programs that use SSL would trust these certificates.
Exclusions include Firefox, which uses its own root store, and Chrome, which uses additional TLS/SSL security measures to safeguard users from unauthorized certificates. Furthermore, Google blocked these certificates in Chrome with a CRLSet push. Google also clarified that Chrome on other platforms, which include Chrome OS, Android, iOS and OS X was not affected as the Indian CCA certificates are not included in these root stores.
Google was in contact with the India CCA, which rolled out a subsequent CRLSet push to revoke the NIC certificates, rendering all NIC domains inaccessible. The NICAA has since ceased issuing digital certificates for the time being, and has the following message on its website:
Due to technical reasons, NICCA is not issuing certificates as of now. All operations have been stopped for some time and are not expected to resume soon. DSC application forms will not be accepted till operations are resumed and further instructions will be issued thereafter. Inconvenience caused is regretted.
We may earn a commission for purchases using our links. Learn more.
Fitness apps and wearables are great, as long as you aren't in a wheelchair
Plenty of people with mobility issues want to buy fitness-based wearables, myself included. Right now they shouldn't because it seems like no company wants their money bad enough to work for it.
Samsung One UI 2.0 review: The best (and worst) Android 10 features
Here's everything you need to know about One UI 2.0 for your Samsung phone.
Everything you need to know about the Galaxy Z Fold 2!
The first Galaxy Fold was one of the most impressive smartphones of recent years, and now, Samsung's following up on it with the Galaxy Z Fold 2. Here's everything you need to know about it!
The best replacement bands for your 46mm Galaxy Watch
The strap included with the Galaxy Watch is fine, but these offer much more customization. Not only do these straps offer you the chance to change up the style of your watch, but you also get materials that bring added durability for a strap that can take what you throw at it.