[SSL Observatory] Microsoft sub-CA issues incorrect certificate for "microsoft.com".

Peter Gutmann pgut001 at cs.auckland.ac.nz
Mon Mar 26 03:13:08 PDT 2012


John Nagle <nagle at animats.com> writes:

>We noticed this because our SSL certificate checking system couldn't identify
>"MSCOM" as a valid real-world business in Redmond, Washington.

Do you have any more information on how you're doing the checking, and what it
is you check?  The SiteTruth site is a bit sparse on technical details, and
it sounds like interesting stuff.

Peter.



More information about the Observatory mailing list