Other nomination

CNNINC SSL MitM

An unconstrained intermediate certificate issued by CNNIC was installed in a customer traffic-inspecting firewall, which then generated certificates for domains that operator did not own; browsers accepted them without warning, so any site could be impersonated. Mozilla revoked the intermediate through OneCRL in Firefox 37.

Record

Published by

Mozilla Security Blog

In the archive

• Nominated for the 2015 Top 10 Web Hacking Techniques

Tags

• tls
• https
• vendor-advisory
• mitigation
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of Mozilla Security Blog, first published at the original source. Preserved copies are kept so the citation survives its host.