Last Comment Bug 724942 - Remove Trustwave SecureTrust CA due to selling Certificates for MITM attacks
: Remove Trustwave SecureTrust CA due to selling Certificates for MITM attacks
Status: RESOLVED DUPLICATE of bug 724929
:
Product: mozilla.org
Classification: Other
Component: CA Certificates (show other bugs)
: other
: x86 Windows 7
: -- critical (vote)
: ---
Assigned To: Kathleen Wilson
:
:
Mentors:
Depends on:
Blocks:
  Show dependency tree / graph
 
Reported: 2012-02-07 08:28 PST by Matthias Versen [:Matti]
Modified: 2012-02-09 09:44 PST (History)
1 user (show)
See Also:
Crash Signature:
(edit)
QA Whiteboard:
Iteration: ---
Points: ---


Attachments

Description User image Matthias Versen [:Matti] 2012-02-07 08:28:44 PST
This company sold a Certificate that allowed a MITM attack.

They assure that they will not do that again in the future but this is a fundamental breach of trust that should lead to a removing of their root CA in the Mozilla root store.
You may argue that many companies are installing their own root certificate in the browsers that are used inside their company that allows basically the same MITM but this case is different since a user of that affected network will assume that a encrypted connection from his own hard/software is secure.

Their press release:
http://blog.spiderlabs.com/2012/02/clarifying-the-trustwave-ca-policy-update.html
Comment 1 User image Matthias Versen [:Matti] 2012-02-07 09:42:25 PST

*** This bug has been marked as a duplicate of bug 724929 ***

Note You need to log in before you can comment on or make changes to this bug.