The government had implemented comprehensive contingency measures before Google announced that Chunghwa Telecom’s newly issued transport layer security (TLS) protocol would be removed from the list of default trusted certificates on Google Chrome after July 31, the Ministry of Digital Affairs said yesterday.
Google’s announcement came under scrutiny at the legislature, with Chinese Nationalist Party (KMT) Legislator Ko Ju-chun (葛如鈞) describing the Web browser operator’s decision as a “nuclear disaster” in digital trust.
If a Web site does not update its certificate before expiration, a red alert — meaning the browser believes the destination is unsafe — would pop up whenever a page on the site is opened in Google Chrome, Ko said.
Photo: Lin Chih-yi, Taipei Times
The problem would not be solved by simply not using Google Chrome, as the browser has a global market share of 65 percent, he said.
Google announced that TLS certificates issued by Chunghwa Telecom and Hungary-based NetLock would not be trusted on Google Chrome from Aug.1.
The nation’s largest telecom, which was in charge of building networks for most government agencies, said that it failed to complete some security procedures outlined in a new Chrome policy before a deadline, prompting Google to update its security list.
“We have completed all of the security updates as requested by Google Chrome,” Chunghwa Telecom said in a statement. “Unfortunately, it still decided to change the default setting.”
“The reason for the delisting was not due to holes in the TLS certificate or passkey leaks,” the statement said, adding that the telecom “would continue to work with Google to have the TLS certificate listed a trusted one on Google Chrome by default again, which should be achieved by March next year.”
Chrome’s new security policy does not affect the TLS certificate that Chunghwa Telecom issued before July 31, the statement said, adding that its certificate would not have problems running on Web browsers developed by Microsoft and Apple.
The TLS certificate issued by Chunghwa Telecom fully complies with the Electronic Signatures Act (電子簽章法), and has passed the audit and verification administered by WebTrust for Certification Authorities program and ISO27000.
People can be assured that electronic signatures transmitted via Chunghwa Telecom Internet services do not have any security breaches, it said.
Since March, the government has implemented dual certificate authentication on government Web sites, with one of them issued by the TLS Certification Authority, the ministry said.
The mechanism was implemented to ensure that government Web sites would continue to operate safely on all mainstream browsers, while public digital services would be stable and trustworthy, the ministry said.
Google’s change in digital trust policy affects the new TLS certificate issued after July 31, but the certificate issued by the certification agency is valid for one year, the ministry said.
In other words, people would continue to have full cybersecurity protection when using Chrome to access government Web sites, it said, adding that the public need not worry that government Web sites would be marked as unsafe by the browser.
A year-long renovation of Taipei’s Bangka Park (艋舺公園) began yesterday, as city workers fenced off the site and cleared out belongings left by homeless residents who had been living there. Despite protests from displaced residents, a city official defended the government’s relocation efforts, saying transitional housing has been offered. The renovation of the park in Taipei’s Wanhua District (萬華), near Longshan Temple (龍山寺), began at 9am yesterday, as about 20 homeless people packed their belongings and left after being asked to move by city personnel. Among them was a 90-year-old woman surnamed Wang (王), who last week said that she had no plans
TO BE APPEALED: The environment ministry said coal reduction goals had to be reached within two months, which was against the principle of legitimate expectation The Taipei High Administrative Court on Thursday ruled in favor of the Taichung Environmental Protection Bureau in its administrative litigation against the Ministry of Environment for the rescission of a NT$18 million fine (US$609,570) imposed by the bureau on the Taichung Power Plant in 2019 for alleged excess coal power generation. The bureau in November 2019 revised what it said was a “slip of the pen” in the text of the operating permit granted to the plant — which is run by Taiwan Power Co (Taipower) — in October 2017. The permit originally read: “reduce coal use by 40 percent from Jan.
China might accelerate its strategic actions toward Taiwan, the South China Sea and across the first island chain, after the US officially entered a military conflict with Iran, as Beijing would perceive Washington as incapable of fighting a two-front war, a military expert said yesterday. The US’ ongoing conflict with Iran is not merely an act of retaliation or a “delaying tactic,” but a strategic military campaign aimed at dismantling Tehran’s nuclear capabilities and reshaping the regional order in the Middle East, said National Defense University distinguished adjunct lecturer Holmes Liao (廖宏祥), former McDonnell Douglas Aerospace representative in Taiwan. If
‘SPEY’ REACTION: Beijing said its Eastern Theater Command ‘organized troops to monitor and guard the entire process’ of a Taiwan Strait transit China sent 74 warplanes toward Taiwan between late Thursday and early yesterday, 61 of which crossed the median line in the Taiwan Strait. It was not clear why so many planes were scrambled, said the Ministry of National Defense, which tabulated the flights. The aircraft were sent in two separate tranches, the ministry said. The Ministry of Foreign Affairs on Thursday “confirmed and welcomed” a transit by the British Royal Navy’s HMS Spey, a River-class offshore patrol vessel, through the Taiwan Strait a day earlier. The ship’s transit “once again [reaffirmed the Strait’s] status as international waters,” the foreign ministry said. “Such transits by
RSS