Why still Diginotar certificate exist on v.7 of FF?
After Diginotar hacked by a person Mozilla said that we should delete Diginotar root CA certificate in v.6 but in v.7 it still exist. why?
After Diginotar hacked by a person Mozilla said that we should delete Diginotar root CA certificate in v.6 but in v.7 it still exist. why?
所有回覆 (2)
It exists as an untrusted certificate authority. So when Firefox encounters a certificate issued by DigiNotar it already knows that the CA is malicious and therefore not to trust the certificate.
You can click the Edit button on the DigiNotar certificates to verify that all trust bits are unchecked.
That will make it impossible for them to be used as root certificates.
Select a DigiNotar certificate in the Certificate Manager.
- Click the Edit button to verify that all trust bits are unchecked
- Click the View button and go to Details to verify that the certificate has been deactivated (Explicitly Distrust DigiNotar Root CA)