The government had implemented comprehensive contingency measures before Google announced that Chunghwa Telecom’s newly issued transport layer security (TLS) protocol would be removed from the list of default trusted certificates on Google Chrome after July 31, the Ministry of Digital Affairs said yesterday.
Google’s announcement came under scrutiny at the legislature, with Chinese Nationalist Party (KMT) Legislator Ko Ju-chun (葛如鈞) describing the Web browser operator’s decision as a “nuclear disaster” in digital trust.
If a Web site does not update its certificate before expiration, a red alert — meaning the browser believes the destination is unsafe — would pop up whenever a page on the site is opened in Google Chrome, Ko said.
Photo: Lin Chih-yi, Taipei Times
The problem would not be solved by simply not using Google Chrome, as the browser has a global market share of 65 percent, he said.
Google announced that TLS certificates issued by Chunghwa Telecom and Hungary-based NetLock would not be trusted on Google Chrome from Aug.1.
The nation’s largest telecom, which was in charge of building networks for most government agencies, said that it failed to complete some security procedures outlined in a new Chrome policy before a deadline, prompting Google to update its security list.
“We have completed all of the security updates as requested by Google Chrome,” Chunghwa Telecom said in a statement. “Unfortunately, it still decided to change the default setting.”
“The reason for the delisting was not due to holes in the TLS certificate or passkey leaks,” the statement said, adding that the telecom “would continue to work with Google to have the TLS certificate listed a trusted one on Google Chrome by default again, which should be achieved by March next year.”
Chrome’s new security policy does not affect the TLS certificate that Chunghwa Telecom issued before July 31, the statement said, adding that its certificate would not have problems running on Web browsers developed by Microsoft and Apple.
The TLS certificate issued by Chunghwa Telecom fully complies with the Electronic Signatures Act (電子簽章法), and has passed the audit and verification administered by WebTrust for Certification Authorities program and ISO27000.
People can be assured that electronic signatures transmitted via Chunghwa Telecom Internet services do not have any security breaches, it said.
Since March, the government has implemented dual certificate authentication on government Web sites, with one of them issued by the TLS Certification Authority, the ministry said.
The mechanism was implemented to ensure that government Web sites would continue to operate safely on all mainstream browsers, while public digital services would be stable and trustworthy, the ministry said.
Google’s change in digital trust policy affects the new TLS certificate issued after July 31, but the certificate issued by the certification agency is valid for one year, the ministry said.
In other words, people would continue to have full cybersecurity protection when using Chrome to access government Web sites, it said, adding that the public need not worry that government Web sites would be marked as unsafe by the browser.
Beijing could eventually see a full amphibious invasion of Taiwan as the only "prudent" way to bring about unification, the US Department of Defense said in a newly released annual report to Congress. The Pentagon's "Annual Report to Congress: Military and Security Developments Involving the People's Republic of China 2025," was in many ways similar to last year’s report but reorganized the analysis of the options China has to take over Taiwan. Generally, according to the report, Chinese leaders view the People's Liberation Army's (PLA) capabilities for a Taiwan campaign as improving, but they remain uncertain about its readiness to successfully seize
Taiwan is getting a day off on Christmas for the first time in 25 years. The change comes after opposition parties passed a law earlier this year to add or restore five public holidays, including Constitution Day, which falls on today, Dec. 25. The day marks the 1947 adoption of the constitution of the Republic of China, as the government in Taipei is formally known. Back then the Chinese Nationalist Party (KMT) governed China from Nanjing. When the KMT, now an opposition party in Taiwan, passed the legislation on holidays, it said that they would help “commemorate the history of national development.” That
Taiwan has overtaken South Korea this year in per capita income for the first time in 23 years, IMF data showed. Per capita income is a nation’s GDP divided by the total population, used to compare average wealth levels across countries. Taiwan also beat Japan this year on per capita income, after surpassing it for the first time last year, US magazine Newsweek reported yesterday. Across Asia, Taiwan ranked fourth for per capita income at US$37,827 this year due to sustained economic growth, the report said. In the top three spots were Singapore, Macau and Hong Kong, it said. South
Police today said they are stepping up patrols throughout the Taipei MRT system, after a social media user threatened to detonate a bomb at an unspecified station this afternoon. Although they strongly believe the threat to be unsubstantiated, Taipei Metro police and the Railway Police Bureau still said that security and patrols would be heightened through the system. Many copycat messages have been posted since Friday’s stabbing attacks at Taipei Main Station and near Zhongshan MRT Station that left three dead and 11 injured, police said. Last night, a Threads user in a post said they would detonate a bomb on the Taipei
RSS