#cnnic

Çin’de internet kullanıcısı Avrupa nüfusu kadar

Çin’de internet kullanıcılarının sayısı Avrupa nüfusunun toplamına ulaştı. Resmi makamların yaptığı açıklamaya göre ülkede kullanıcıların sayısı yaklaşık 731 milyon.

Çin 1 milyar 370 milyorn nüfusuyla dünyanın en kalabalık nüfusa sahip ülkesi. Son açıklanan istatistiklere göre de ülkenin yüzde 53,2’si, yani 731 milyon Çinli internet kullanıcısı. Çin’de internet kullananların sayısı neredeyse…

去年是CNNIC（国字头的“中国互联网络信息中心”，12306网站证书的签发单位）

这次是WoSign

这么多年Google仅有的几个distrust CA根证书的案例两个给了中国的CA。哦不对，是两个半，今年9月WoSign入股了StartCom……

失信这件事目前在我朝可能还不是一件特别大、特别严肃的事，但在国际范围内尤其是数字证书这个特定的领域，一次失信被坐实带来的后果是没有后悔药的，这也是为什么一直到现在使用Chrome、Safari、FF等浏览器打开12306订票网站仍是个红叉甚至无法打开了

当然，12306用政府公信力做背书让不明真相的群众安装并信任证书绕过浏览器安全机制的做法是另一个话题了。失信一次就被distrust（而且Google还在呼吁FF、Safari等浏览器，以及微软、苹果、Linux社区等操作系统开发商一致行动），这不是小题大做，有兴趣的同学可以自行百…

事情是这样的，09年黄色泛滥成灾，从web到wap无一不存在黄色，由CCAV开始搅和，不断的抨击黄色， 广电总局从之前的大面积封锁bt，视频分享网站到现在的域名，似乎把cnnic（工信部）该管的都管了，在cnnic开始整治.cn域名时，国内cn站长基本都囧了，个人.cn是比较扯淡了

事情是这样的，09年黄色泛滥成灾，从web到wap无一不存在黄色，由CCAV开始搅和，不断的抨击黄色， 广电总局从之前的大面积封锁bt，视频分享网站到现在的域名，似乎把cnnic（工信部）该管的都管了，在cnnic开始整治.cn域名时，国内cn站长基本都囧了，个人.cn是比较扯淡了

CNNIC 申請成為 CA/Browser Forum 成員

面對面的會議記錄，在第一天的會議記錄「2015-06-24 Face-to-Face Meeting 35 Minutes」的一開頭就看到 CNNIC 申請成為 CA/Browser Forum 的成員。 目前有兩個疑慮，第一個是執照的問題： 1. They don’t appear to be licensed in China (BRs requires that a CA be licensed in the country they do business if a licensing scheme is in place) and 第二個則是同時具有 CA 以及 ccTLD 註冊者的身份： 2. they appear to be a registrar for a TLD as well as a CA. 再來是第二天開頭就看到在討論 EV Wildcard 的問題…

CA/Browser Forum 討論網域認證與 CNNIC 的事情

兩個禮拜前 CA/Browser Forum 的會議記錄，討論了網域認證以及 CNNIC 的事情：「Minutes of CA-Browser Forum Meeting – 2 April 2015」。

由於 US-CERT 的關切，看起來「認證」這件事情要被 CA/Browser Forum 暫時不會有改善了：

The consensus was that US-CERT was incorrect in saying the email method of domain confirmation presents a vulnerability, that no changes were required, and that the Forum did not need to make any formal response to the US-CERT advisory.

另外是…

After reading a few stories like this “Apple Leaves CNNIC Root in iOS, OSX Certificate Trust Lists” that didnt include instructions on how to remove them yourself I wrote a quick and ugly bash script that automatically removes the CNNIC and the China Internet Network Information Center EV Certificates Root certificates from OSX. 

You can download it here.

Use it at your own risk. I am a terrible script writer and this may install Windows 98. 

On April 1st, Google issued an update on their blogstating they will no longer trust any root certificates issued by CNNIC (China Internet Network Information Center, the administrative agency responsible for Internet affairs under the Ministry of Information Industry of the People’s Republic of China). This will take effect in next Google Chrome update. In order to minimize the impact of this…