Please note that this is a very serious concern. There is NO SAFE WAY to
install these certificates in Ubuntu or any Linux distro, because the
official certificate website mentioned above is not secure. Thus, since
DNS is not secure, you can never be sure if the ITI website is the real
one, at a given moment.
Microsoft Windows comes with the certificate pre-installed, which is
correct. And so should Ubuntu come at least with the root certificates
from
http://www.iti.gov.br/icp-brasil/repositorio
This makes every official brazilian site pottentially insecure affecting
every brazilian user that accesses every brazilian government website
that needs secure access, including some state bank institutions.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/587096
Title:
Add ICP-Brasil certificates
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates/+bug/587096/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
