Skip to main content

Google Lets SMTP Certificate Expire

  • April 4, 2015
  • 2 replies
  • 0 views

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
By Mike Lennon on April 04, 2015
 

Whoops! Google on (before) Saturday failed to renew a digital certificate used to secure its smtp.google.com domain, the domain used by Gmail and Google Apps users to send outgoing email.

Developing story, more to come!
 
http://www.securityweek.com/sites/default/files/features/Google-SMTP-Expired-Certificate.jpg
 
Full Article

2 replies

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
An Update:
 
By Mike Lennon on April 04, 2015
 
According to Google, Google Internet Authority G2 is operated in accordance with the latest version of the CA/Browser Forum Baseline Requirements and is signed by the GeoTrust Global CA.
"We're aware of a problem with Gmail affecting a majority of users. The affected users are able to access Gmail, but are seeing error messages and/or other unexpected behavior," Google posted to its Gmail status page Saturday afternoon.
At 3:46PM, Google posted another update to say the issue has been resolved, but without any explaination of what happened.
 
Full Article
 
 

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
April 5, 2015  By Pierluigi Paganini
 
On Saturday April 4, the Google Internet Certificate Authority G2 has become untrusted due to an expired digital certificate in the chain of trust. The Google Internet Authority G2 is an essential component of the Google PKI infrastructure, it issues digital certificates for company websites and properties.
In the following image posted by securityweek.com there is the result of a check by online service SSL Shopper run on Saturday.
http://securityaffairs.co/wordpress/wp-content/uploads/2015/04/Google-Internet-Authority-G2-expired.jpg
 
Full Article