The government had implemented comprehensive contingency measures before Google announced that Chunghwa Telecom’s newly issued transport layer security (TLS) protocol would be removed from the list of default trusted certificates on Google Chrome after July 31, the Ministry of Digital Affairs said yesterday.
Google’s announcement came under scrutiny at the legislature, with Chinese Nationalist Party (KMT) Legislator Ko Ju-chun (葛如鈞) describing the Web browser operator’s decision as a “nuclear disaster” in digital trust.
If a Web site does not update its certificate before expiration, a red alert — meaning the browser believes the destination is unsafe — would pop up whenever a page on the site is opened in Google Chrome, Ko said.
Photo: Lin Chih-yi, Taipei Times
The problem would not be solved by simply not using Google Chrome, as the browser has a global market share of 65 percent, he said.
Google announced that TLS certificates issued by Chunghwa Telecom and Hungary-based NetLock would not be trusted on Google Chrome from Aug.1.
The nation’s largest telecom, which was in charge of building networks for most government agencies, said that it failed to complete some security procedures outlined in a new Chrome policy before a deadline, prompting Google to update its security list.
“We have completed all of the security updates as requested by Google Chrome,” Chunghwa Telecom said in a statement. “Unfortunately, it still decided to change the default setting.”
“The reason for the delisting was not due to holes in the TLS certificate or passkey leaks,” the statement said, adding that the telecom “would continue to work with Google to have the TLS certificate listed a trusted one on Google Chrome by default again, which should be achieved by March next year.”
Chrome’s new security policy does not affect the TLS certificate that Chunghwa Telecom issued before July 31, the statement said, adding that its certificate would not have problems running on Web browsers developed by Microsoft and Apple.
The TLS certificate issued by Chunghwa Telecom fully complies with the Electronic Signatures Act (電子簽章法), and has passed the audit and verification administered by WebTrust for Certification Authorities program and ISO27000.
People can be assured that electronic signatures transmitted via Chunghwa Telecom Internet services do not have any security breaches, it said.
Since March, the government has implemented dual certificate authentication on government Web sites, with one of them issued by the TLS Certification Authority, the ministry said.
The mechanism was implemented to ensure that government Web sites would continue to operate safely on all mainstream browsers, while public digital services would be stable and trustworthy, the ministry said.
Google’s change in digital trust policy affects the new TLS certificate issued after July 31, but the certificate issued by the certification agency is valid for one year, the ministry said.
In other words, people would continue to have full cybersecurity protection when using Chrome to access government Web sites, it said, adding that the public need not worry that government Web sites would be marked as unsafe by the browser.
Aftershocks from a magnitude 6.2 earthquake that struck off Yilan County at 3:45pm yesterday could reach a magnitude of 5 to 5.5, the Central Weather Administration (CWA) said. Seismological Center technical officer Chiu Chun-ta (邱俊達) told a news conference that the epicenter of the temblor was more than 100km from Taiwan. Although predicted to measure between magnitude 5 and 5.5, the aftershocks would reach an intensity of 1 on Taiwan’s 7-tier scale, which gauges the actual effect of an earthquake, he said. The earthquake lasted longer in Taipei because the city is in a basin, he said. The quake’s epicenter was about 128.9km east-southeast
GENSLER SURVEY: ‘Economic infrastructure is not enough. A city needs to inspire pride, offer moments of joy and foster a sense of belonging,’ the company said Taipei was named the city with the “highest staying power” in the world by US-based design and architecture firm Gensler. The Taiwanese capital earned the top spot among 65 cities across six continents with 64 percent of Taipei respondents in a survey of 33,000 people saying they wanted to stay in the city. Rounding out the top five were Vietnam’s Ho Chi Minh City (61 percent), Singapore (59 percent), Sydney (58 percent) and Berlin (51 percent). Sixth to 10th place went to Monterrey, Mexico; Munich, Germany; Sao Paulo, Brazil; Vancouver; and Seoul. Cities in the US were ranked separately, with Minneapolis first at
The New Taipei City Government today warned about the often-overlooked dangers of playing in water, and recommended safe swimming destinations to cool off from the summer heat. The following locations in the city as safe and fun for those looking to enjoy the water: Chienshuiwan (淺水灣), Baishawan (白沙灣), Jhongjiao Bay (中角灣), Fulong Beach Resort (福隆海水浴場) and Sansia District’s (三峽) Dabao River (大豹溪), New Taipei City Tourism and Travel Department Director-General Yang Tsung-min (楊宗珉) said. Outdoor bodies of water have variables outside of human control, such as changing currents, differing elevations and environmental hazards, all of which can lead to accidents, Yang said. Sudden
Tropical Storm Podul has formed over waters north-northeast of Guam and is expected to approach the seas southeast of Taiwan next week, the Central Weather Administration (CWA) said today. The 11th Pacific storm of the year developed at 2am over waters about 2,660km east of Oluanpi (歐鑾鼻), Pingtung County — Taiwan's southernmost tip. It is projected to move westward and could have its most significant impact on Taiwan on Wednesday and Thursday next week, the CWA said. The agency did not rule out the possibility of issuing a sea warning at that time. According to the CWA's latest update, Podul is drifting west-northwest