Google Warns Of Dodgy Digital Certificates Issued By India

Google disclosed that India's National Informatics Centre (NIC) issued unauthorized intermediate certificates that could have been used to impersonate Google domains. Google blocked the certificates in Chrome, coordinated revocation with India’s Controller of Certifying Authorities and Microsoft, and reported no widespread abuse; however, the event underscores PKI trust-chain risks and the potential for man-in-the-middle interception or malicious code signing if fraudulent certificates are used.