The government had implemented comprehensive contingency measures before Google announced that Chunghwa Telecom’s newly issued transport layer security (TLS) protocol would be removed from the list of default trusted certificates on Google Chrome after July 31, the Ministry of Digital Affairs said yesterday.
Google’s announcement came under scrutiny at the legislature, with Chinese Nationalist Party (KMT) Legislator Ko Ju-chun (葛如鈞) describing the Web browser operator’s decision as a “nuclear disaster” in digital trust.
If a Web site does not update its certificate before expiration, a red alert — meaning the browser believes the destination is unsafe — would pop up whenever a page on the site is opened in Google Chrome, Ko said.
Photo: Lin Chih-yi, Taipei Times
The problem would not be solved by simply not using Google Chrome, as the browser has a global market share of 65 percent, he said.
Google announced that TLS certificates issued by Chunghwa Telecom and Hungary-based NetLock would not be trusted on Google Chrome from Aug.1.
The nation’s largest telecom, which was in charge of building networks for most government agencies, said that it failed to complete some security procedures outlined in a new Chrome policy before a deadline, prompting Google to update its security list.
“We have completed all of the security updates as requested by Google Chrome,” Chunghwa Telecom said in a statement. “Unfortunately, it still decided to change the default setting.”
“The reason for the delisting was not due to holes in the TLS certificate or passkey leaks,” the statement said, adding that the telecom “would continue to work with Google to have the TLS certificate listed a trusted one on Google Chrome by default again, which should be achieved by March next year.”
Chrome’s new security policy does not affect the TLS certificate that Chunghwa Telecom issued before July 31, the statement said, adding that its certificate would not have problems running on Web browsers developed by Microsoft and Apple.
The TLS certificate issued by Chunghwa Telecom fully complies with the Electronic Signatures Act (電子簽章法), and has passed the audit and verification administered by WebTrust for Certification Authorities program and ISO27000.
People can be assured that electronic signatures transmitted via Chunghwa Telecom Internet services do not have any security breaches, it said.
Since March, the government has implemented dual certificate authentication on government Web sites, with one of them issued by the TLS Certification Authority, the ministry said.
The mechanism was implemented to ensure that government Web sites would continue to operate safely on all mainstream browsers, while public digital services would be stable and trustworthy, the ministry said.
Google’s change in digital trust policy affects the new TLS certificate issued after July 31, but the certificate issued by the certification agency is valid for one year, the ministry said.
In other words, people would continue to have full cybersecurity protection when using Chrome to access government Web sites, it said, adding that the public need not worry that government Web sites would be marked as unsafe by the browser.
NATIONAL SECURITY: Authorities are working to confirm the identities of the military personnel involved and investigating possible illegal conduct and regulatory violations Authorities are probing possible national security implications after Kinmen police and immigration officers on Sunday found a Chinese woman allegedly posing as a tourist while engaging in prostitution involving more than 10 military personnel. The woman, surnamed Chen (陳), has since been deported, authorities said, adding that investigators are still working to confirm the identities of those implicated, as the records only listed code names and aliases. The case stemmed from a report received by the Kinmen District Prosecutors’ Office on Friday last week from the Jinhu Precinct of the Kinmen County Police Bureau. On Sunday, police, along with the National Immigration
GLOBALGIVING: ‘ Caving to external pressure is not acceptable for an organization that has cultivated justice reform and human rights for 30 years,’ one NGO said A slew of non-government organizations (NGOs) have withdrawn from the GlobalGiving fundraising platform after it announced it would use “Chinese Taipei” instead of “Taiwan” from next month. The Taiwan Good Rice Association wrote on Facebook on Friday that it was informed on April 28 via a teleconference call of the change, which was made because the platform wanted to operate in China. Taiwan Good Rice is to terminate all cooperative relationships with GlobalGiving in response to the platform’s “unilateral and non-negotiable” decision to remove references to Taiwan, the NGO said. “Taiwan is in the official name of Taiwan Good Rice Association and the
HEAVY WEATHER: Typhoon Jangmi is due to crash straight into the Ryukyus as airlines look to shift flights to larger aircraft or cancel flights to Okinawa entirely Taiwan’s international air carriers announced flight adjustments over the weekend as Typhoon Jangmi is forecast to hit the Ryukyu Islands today and tomorrow. The Central Weather Administration (CWA) upgraded Jangmi from a tropical storm to a typhoon at 8am yesterday, with the eye located 580km south of Naha city. It was moving north at 19kph. Today, China Airlines’ CI-120, CI-121, CI-122 and CI-123 flights between Taoyuan and Naha, Okinawa, have been canceled as well as CI-132 and CI-133 between Kaohsiung and Naha. EVA Air’s BR-112, BR-113, BR-186 and BR-185 flights between Taoyuan and Naha are also canceled. Low-cost carrier Tigerair Taiwan canceled IT-230,
MULTIPRONGED APPROACH: China has sought to pressure Palau across a number of fronts, but the island nation has staunchly resisted overtures to ditch Taiwan Palau has been firm in backing Taiwan despite Chinese pressure that uses tourism economics, cyberattacks and criminal infiltration as tools to threaten the Pacific ally into renouncing its recognition of Taiwan as a sovereign state. The Presidential Office yesterday announced that Vice President Hsiao Bi-khim (蕭美琴) would visit Palau from Saturday to Wednesday next week at the invitation of Palauan President Surangel Whipps Jr. Whipps in April said in an interview that China had outspokenly asked Palau to “denounce Taiwan.” “And we have said: ‘We have no enemies, but nobody tells us who our friends are,’” he said. Whipps has told reporters multiple times
RSS