Η Microsoft he published a security advisory με τίτλο «Ακατάλληλα ψηφιακά πιστοποιητικά που εκδίδονται θα μπορούσαν να επιτρέψουν πλαστογράφηση" ή στα αγγλικά "Improperly Issued Digital Certificates Could Allow spoofing". Η εταιρεία επέλεξε αυτό τον τρόπο για να ανακοινώσει τα αντίμετρα που παίρνουν για την κυκλοφορία ψεύτικων domains από την αρχή έκδοσης πιστοποιητικών του Εθνικού Κέντρου Πληροφορικής (NIC), μια υπηρεσία της κυβέρνησης της Ινδίας.
For unexplained reasons, the NIC in California has released a number of Google domains that allow for forgery and man-in-the-middle attacks if a program trusts the certificates. Google explained that their own products do not trust the Indian Certification Authority (CCA) auditor. Continuing with Google, it drops the ball to Microsoft, indicating that the Trusted Root Store includes CCA on trusted certificates.
The Microsoft vendor reports that her service has trusted the certificates to date to update the Trusted Root Store list for all supported versions of Windows. Note that this means that users still using Windows XP are at risk.
The Microsoft bulletin lists the domains that were issued irregularly. There are 17 Google domains such as: google.com, m.gmail.com and gstatic.com and 27 Yahoo domains such as: mail.yahoo.com, profile.yahoo.com and me.yahoo.com. Finally, fake domain is also static.com, a PaaS (Platform as a Service) cloud.
