nationwide interception of Facebook & webmail login credentials in Tunisia

James Firth james2 at jfirth.net
Mon Jan 31 16:10:58 GMT 2011


> >So Cert Patrol just picked up an SSL certificate switch for
> >encrypted.google.com; here's the new SHA1 fingerprint I've got...
> >
> >F1:BD:D4:59:78:7F:6B:EB:2F:4D:A8:72:E1:74:86:53:79:6B:3A:DD
> >
> >Anyone confirm they've also had a switch
> 
> Yes I have that one too...  apparently it is valid from 5Jan11 to
> 5Jan12
> 

Well I get one 21/10/2010 to 21/10/2011 - without panicking myself I assume
Google have more than one certificate, with overlapping dates.

Interestingly I opened a second browser on a different OS from the same ISP
connection and got the above fingerprint, 5th Jan for 1 yr.

James Firth






More information about the ukcrypto mailing list