http://www.reddit.com/r/AskNetsec/comments/1s9nd5/googlecom_dns_hijack_or_something_else/
Liam On Mon, Dec 9, 2013 at 9:03 PM, Bacon Zombie <[email protected]> wrote: > " Late on December 3rd, we became aware of unauthorized digital > certificates for several Google domains. We investigated immediately and > found the certificate was issued by an intermediate certificate authority > (CA) linking back to ANSSI, a French certificate authority. Intermediate CA > certificates carry the full authority of the CA, so anyone who has one can > use it to create a certificate for any website they wish to impersonate." > > > http://googleonlinesecurity.blogspot.ro/2013/12/further-improving-digital-certificate.html?m=1 > On 10 Dec 2013 01:59, "Bacon Zombie" <[email protected]> wrote: > > Looks like a French based CA has generate a "fake" Google Cert which they > have just found out about. > On 10 Dec 2013 01:47, "Jim Halfpenny" <[email protected]> wrote: > >> The SSL certificate looks legit. It's a wildcard for a whole load of >> Google services and I've seen this before on some kind of Google CDN or >> content accelerator. Makes me wonder what one of those certs is worth on >> the black market.... >> >> Jim >> >> >> On 7 December 2013 14:18, chilli34 . <[email protected]> wrote: >> >>> Has anybody heard of Google spinning up some new IP address ranges in >>> Mexico? We currently are having issues resolving requests for >>> google.com and our ISP Is sending us to some 201.130.208.45 addresses >>> which have the Google front page but the subnet range isn't owned by >>> google.com. Hoping somebody out there might have some info on this, >>> anything you can provide would be great! >>> >>> Thanks, >>> p.s. here is a full list of IP's that we are hitting. >>> 201.130.208.45 >>> 201.130.208.49 >>> 201.130.208.53 >>> 201.130.208.57 >>> 201.130.208.59 >>> 201.130.208.15 >>> 201.130.208.19 >>> 201.130.208.23 >>> 201.130.208.27 >>> 201.130.208.29 >>> 201.130.208.30 >>> 201.130.208.34 >>> 201.130.208.38 >>> 201.130.208.42 >>> 201.130.208.44 >>> >>> Brian >>> >>> _______________________________________________ >>> Pauldotcom mailing list >>> [email protected] >>> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >>> Main Web Site: http://pauldotcom.com >>> >> >> >> _______________________________________________ >> Pauldotcom mailing list >> [email protected] >> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >> Main Web Site: http://pauldotcom.com >> > > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com >
_______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
