French gov used fake Google certificate to read its workers’ traffic

A French government agency has been caught signing SSL certificates and impersonating Google.

The bogus certificates were endorsed by the certificate authority of the French Treasury, DG Trésor. And the Treasury’s own authorisation certificate was, in turn, vouched for by IGC/A (Infrastructure de Gestion de la Confiance de l’Administration) and ultimately ANSSI, the French equivalent of the CESG assurance wing of GCHQ.

Read more »

Advertisements

About lightsigns
Pointing my finger on the brighter spots. We win, and winning is fun.

Comments are closed.

%d bloggers like this: