Use your < > keys to browse more stories

After Being Unblocked in China, Github Suffers Attack on Site’s HTTPS Certificate

china-github-suffers-https-certificate-attack

Chrome browser detects that something is wrong with Github’s security certificate.

After the social coding site Github got blocked and then unblocked in China last week, there was a new scare for its users over the weekend. For a few hours, Github visitors based in China, according to the GreatFire blog, “suffered a man in the middle attack” whereby the site’s proper HTTPS security certificate was replaced by a dubious, self-signed one. It’s not clear who perpetrated it. Visitors were greeted by the warning pictured above.

The blog warns that this kind of presumed attack “signifies HTTPS might no longer be safe in China.”

See the full technical details and discussion on Ycombinator.

(Image via @GreatFireChina on Twitter)

(Source: Ycombinator)

 

Did you enjoy this article? Consider becoming a voluntary subscriber to Tech in Asia. Although our site is free and it will stay that way, subscribing is a great way to show your support. Plus, subscribing also gets you exclusive access to our weekly subscribers-only newsletter, a roundup of each week’s most interesting Asia tech news from all over the web. You can read our ethics statement on subscriptions here.