Apple Leaves CNNIC Root in iOS, OSX Certificate Trust Lists

🗓️ 09 Apr 2015 10:57:09Reported by Dennis FisherType

Apple keeps CNNIC root certificates in its trusted store for both iOS and OSX despite the unauthorized certificates issued for some Google domains by an intermediate CA called MCS Holdings

Source	Link
support	www.support.apple.com/en-us/HT204132
support	www.support.apple.com/en-us/HT202858
threatpost	www.threatpost.com/ca-linked-to-chinese-registrar-issued-unauthorized-google-certificates/111774
en	www.en.wikipedia.org/wiki/Hardware_security_module
googleonlinesecurity	www.googleonlinesecurity.blogspot.com/2015/03/maintaining-digital-certificate-security.html
groups	www.groups.google.com/d/msg/mozilla.dev.security.policy/czwlDNbwHXM/qPcyC_DWlSwJ
mozilla	www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/enforcement/
blog	www.blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/
technet	www.technet.microsoft.com/en-us/library/security/3050995/

10 Apr 2015 17:18Current

6.5Medium risk

Vulners AI Score6.5