[nsp-sec] Google Certificate Problems?

[Leif Nixon]

Nick Hilliard <nick at inex.ie> writes:

> That may cause a lot of trouble in NL.  The dutch government DigiD.nl
> system is chained from Diginotar, so wiping the CA from the mozilla cert is
> not without consequences.

That is a slightly different chain, rooted at Staat der Nederlanden Root
CA, i.e. not the root CA that issued the fake Google cert. But, yes, it
passes through the Diginotar organization.

-- 
Leif Nixon - Security officer
National Supercomputer Centre - Swedish National Infrastructure for Computing
Nordic Data Grid Facility - European Grid Infrastructure