|
|
|
|
|
by buraktamturk
3031 days ago
|
|
I wonder what prevents them to order TurkTrust to issue ssl sertificates to do this kind of attack to the secure websites. Turkey recently has gained power to take over companies, if they don't comply with their order (temporary, State-of-emergency law). I think they had issued a certificate to *.google.com before: https://nakedsecurity.sophos.com/2013/01/08/the-turktrust-ss... edit: Ankara was the target. Like this one. |
|
Even when it comes to CAs that voluntarily adopted CAA, their implementations have silently failed on occasion. See https://www.net.in.tum.de/fileadmin/bibtex/publications/pape...