Symantec employees fired for issuing rogue HTTPS certificate for Google

Unauthorized credential was trusted by all browsers, but Google never authorized it.

Read the whole story

 

[Fatesrider]

Among other things, the project makes it possible to detect transport layer security credentials that have been mistakenly issued by a browser-trusted certificate authority. The ability for Google employees to independently discover the unauthorized certificates so quickly is a strong endorsement of the effectiveness of the Certificate Transparency program.

<SMH>

When I read that line, I couldn't help but flash onto a scene in Gringotts Wizarding Bank with a bunch of hobgoblins slowing down time, meticulously examining the SSL certificates then stamping only the authorized ones as they streamed by and tossing the bad ones to the dragon so it could go out and eat whoever sent the bad one...

What the hell did they put in my coffee today?