The government had implemented comprehensive contingency measures before Google announced that Chunghwa Telecom’s newly issued transport layer security (TLS) protocol would be removed from the list of default trusted certificates on Google Chrome after July 31, the Ministry of Digital Affairs said yesterday.
Google’s announcement came under scrutiny at the legislature, with Chinese Nationalist Party (KMT) Legislator Ko Ju-chun (葛如鈞) describing the Web browser operator’s decision as a “nuclear disaster” in digital trust.
If a Web site does not update its certificate before expiration, a red alert — meaning the browser believes the destination is unsafe — would pop up whenever a page on the site is opened in Google Chrome, Ko said.
Photo: Lin Chih-yi, Taipei Times
The problem would not be solved by simply not using Google Chrome, as the browser has a global market share of 65 percent, he said.
Google announced that TLS certificates issued by Chunghwa Telecom and Hungary-based NetLock would not be trusted on Google Chrome from Aug.1.
The nation’s largest telecom, which was in charge of building networks for most government agencies, said that it failed to complete some security procedures outlined in a new Chrome policy before a deadline, prompting Google to update its security list.
“We have completed all of the security updates as requested by Google Chrome,” Chunghwa Telecom said in a statement. “Unfortunately, it still decided to change the default setting.”
“The reason for the delisting was not due to holes in the TLS certificate or passkey leaks,” the statement said, adding that the telecom “would continue to work with Google to have the TLS certificate listed a trusted one on Google Chrome by default again, which should be achieved by March next year.”
Chrome’s new security policy does not affect the TLS certificate that Chunghwa Telecom issued before July 31, the statement said, adding that its certificate would not have problems running on Web browsers developed by Microsoft and Apple.
The TLS certificate issued by Chunghwa Telecom fully complies with the Electronic Signatures Act (電子簽章法), and has passed the audit and verification administered by WebTrust for Certification Authorities program and ISO27000.
People can be assured that electronic signatures transmitted via Chunghwa Telecom Internet services do not have any security breaches, it said.
Since March, the government has implemented dual certificate authentication on government Web sites, with one of them issued by the TLS Certification Authority, the ministry said.
The mechanism was implemented to ensure that government Web sites would continue to operate safely on all mainstream browsers, while public digital services would be stable and trustworthy, the ministry said.
Google’s change in digital trust policy affects the new TLS certificate issued after July 31, but the certificate issued by the certification agency is valid for one year, the ministry said.
In other words, people would continue to have full cybersecurity protection when using Chrome to access government Web sites, it said, adding that the public need not worry that government Web sites would be marked as unsafe by the browser.
Three Taiwanese airlines have prohibited passengers from packing Bluetooth earbuds and their charger cases in checked luggage. EVA Air and Uni Air said that Bluetooth earbuds and charger cases are categorized as portable electronic devices, which should be switched off if they are placed in checked luggage based on international aviation safety regulations. They must not be in standby or sleep mode. However, as charging would continue when earbuds are placed in the charger cases, which would contravene international aviation regulations, their cases must be carried as hand luggage, they said. Tigerair Taiwan said that earbud charger cases are equipped
Foreign travelers entering Taiwan on a short layover via Taiwan Taoyuan International Airport are receiving NT$600 gift vouchers from yesterday, the Tourism Administration said, adding that it hopes the incentive would boost tourism consumption at the airport. The program, which allows travelers holding non-Taiwan passports who enter the country during a layover of up to 24 hours to claim a voucher, aims to promote attractions at the airport, the agency said in a statement on Friday. To participate, travelers must sign up on the campaign Web site, the agency said. They can then present their passport and boarding pass for their connecting international
UNILATERAL MOVES: Officials have raised concerns that Beijing could try to exert economic control over Kinmen in a key development plan next year The Civil Aviation Administration (CAA) yesterday said that China has so far failed to provide any information about a new airport expected to open next year that is less than 10km from a Taiwanese airport, raising flight safety concerns. Xiamen Xiangan International Airport is only about 3km at its closest point from the islands in Kinmen County — the scene of on-off fighting during the Cold War — and construction work can be seen and heard clearly from the Taiwan side. In a written statement sent to Reuters, the CAA said that airports close to each other need detailed advanced
The age requirement for commercial pilots and airline transport pilots is to be lowered by two years, to 18 and 21 years respectively, to expand the pool of pilots in accordance with international standards, the Ministry of Transportation and Communications announced today. The changes are part of amendments to articles 93, 119 and 121 of the Regulations Governing Licenses and Ratings for Airmen (航空人員檢定給證管理規則). The amendments take into account age requirements for aviation personnel certification in the Convention on International Civil Aviation and EU’s aviation safety regulations, as well as the practical needs of managing aviation personnel licensing, the ministry said. The ministry
RSS