Hacker News Reader

Yeah, and injecting Javascript malware. I haven't heard of them MITMing HTTPS though.

http://ncjolt.org/googles-distrust-of-chinese-digital-certif...

CNNIC was the root of trust for a breach involving false certificates for gmail. They claim it was an accident. It might have been. It might not have been.

Reply on news.ycombinator.com