{"id":3283,"date":"2011-09-12T09:22:35","date_gmt":"2011-09-12T08:22:35","guid":{"rendered":"http:\/\/blog.intego.com\/?p=3283"},"modified":"2023-04-11T17:50:28","modified_gmt":"2023-04-12T00:50:28","slug":"diginotar-certificate-hack-what-happened-and-how","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/","title":{"rendered":"DigiNotar Certificate Hack: What Happened and How"},"content":{"rendered":"

The big news in the security industry in the past couple of weeks has been a hack of DigiNotar, a Dutch certificate authority. We reported on this in late August<\/a>, and Apple issued a security update last week to fix the problem on Macs<\/a>.<\/p>\n

The New York Times has a detailed look at what happened and how<\/a>. This was the work of a lone hacker, “Comodohacker,” an Iranian who shared the results of his hack with others in Iran, leading to possibility that some Iranians had their e-mail compromised. Google advised Iranian Gmail users to change their passwords<\/a> because of this breach.<\/p>\n

The hacker took 10 days to get access to DigiNotar’s servers, and created 531 fake certificates, for sites such as Google, Facebook and Skype, as well as the CIA, MI6 and Mossad. As the New York Times says, “He shared them with a person or organization believed to have had control over dozens of Internet service providers and university networks in Iran \u2014 perhaps the government itself.”<\/p>\n

If you’re using a Mac, make sure to apply the latest security update<\/a> so you can be protected from any possible bogus certificates you may encounter.<\/p>\n

For even more information about the DigiNotar breach, see Joshua Long’s comprehensive article on How to Revoke Trust for DigiNotar Root CA Certs\u2014Even On Older Macs<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Learn what happened in the DigiNotar certificate hack, how it was done, and what you can do to protect yourself.<\/p>\n","protected":false},"author":3,"featured_media":8975,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,11],"tags":[4678,128,129],"class_list":["post-3283","post","type-post","status-publish","format-standard","has-post-thumbnail","category-security-privacy","category-software-apps","tag-diginotar","tag-ssl-certificate","tag-ssl-certificates"],"yoast_head":"\nDigiNotar Certificate Hack: What Happened and How - The Mac Security Blog<\/title>\n<meta name=\"description\" content=\"Learn what happened in the DigiNotar certificate hack, how it was done, and what you can do to protect yourself.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DigiNotar Certificate Hack: What Happened and How - The Mac Security Blog\" \/>\n<meta property=\"og:description\" content=\"Learn what happened in the DigiNotar certificate hack, how it was done, and what you can do to protect yourself.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/\" \/>\n<meta property=\"og:site_name\" content=\"The Mac Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2011-09-12T08:22:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-12T00:50:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/11\/exclamation-point.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"400\" \/>\n\t<meta property=\"og:image:height\" content=\"260\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Peter James\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Peter James\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/\"},\"author\":{\"name\":\"Peter James\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/person\\\/d0c16bd0a4dd8f82d91204f400c8d116\"},\"headline\":\"DigiNotar Certificate Hack: What Happened and How\",\"datePublished\":\"2011-09-12T08:22:35+00:00\",\"dateModified\":\"2023-04-12T00:50:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/\"},\"wordCount\":229,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2012\\\/11\\\/exclamation-point.jpg\",\"keywords\":[\"DigiNotar\",\"TLS\\\/SSL Certificate\",\"TLS\\\/SSL Certificates\"],\"articleSection\":[\"Security & Privacy\",\"Software & Apps\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/\",\"name\":\"DigiNotar Certificate Hack: What Happened and How - The Mac Security Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2012\\\/11\\\/exclamation-point.jpg\",\"datePublished\":\"2011-09-12T08:22:35+00:00\",\"dateModified\":\"2023-04-12T00:50:28+00:00\",\"description\":\"Learn what happened in the DigiNotar certificate hack, how it was done, and what you can do to protect yourself.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2012\\\/11\\\/exclamation-point.jpg\",\"contentUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2012\\\/11\\\/exclamation-point.jpg\",\"width\":\"400\",\"height\":\"260\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/diginotar-certificate-hack-what-happened-and-how\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DigiNotar Certificate Hack: What Happened and How\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#website\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\",\"name\":\"The Mac Security Blog\",\"description\":\"Keep Macs safe from the dangers of the Internet\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\",\"name\":\"Intego\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"contentUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"width\":875,\"height\":875,\"caption\":\"Intego\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/person\\\/d0c16bd0a4dd8f82d91204f400c8d116\",\"name\":\"Peter James\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"caption\":\"Peter James\"},\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/author\\\/peter\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DigiNotar Certificate Hack: What Happened and How - The Mac Security Blog","description":"Learn what happened in the DigiNotar certificate hack, how it was done, and what you can do to protect yourself.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/","og_locale":"en_US","og_type":"article","og_title":"DigiNotar Certificate Hack: What Happened and How - The Mac Security Blog","og_description":"Learn what happened in the DigiNotar certificate hack, how it was done, and what you can do to protect yourself.","og_url":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/","og_site_name":"The Mac Security Blog","article_published_time":"2011-09-12T08:22:35+00:00","article_modified_time":"2023-04-12T00:50:28+00:00","og_image":[{"width":400,"height":260,"url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/11\/exclamation-point.jpg","type":"image\/jpeg"}],"author":"Peter James","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Peter James","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/#article","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/"},"author":{"name":"Peter James","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116"},"headline":"DigiNotar Certificate Hack: What Happened and How","datePublished":"2011-09-12T08:22:35+00:00","dateModified":"2023-04-12T00:50:28+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/"},"wordCount":229,"commentCount":1,"publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/11\/exclamation-point.jpg","keywords":["DigiNotar","TLS\/SSL Certificate","TLS\/SSL Certificates"],"articleSection":["Security & Privacy","Software & Apps"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/","url":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/","name":"DigiNotar Certificate Hack: What Happened and How - The Mac Security Blog","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/#primaryimage"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/11\/exclamation-point.jpg","datePublished":"2011-09-12T08:22:35+00:00","dateModified":"2023-04-12T00:50:28+00:00","description":"Learn what happened in the DigiNotar certificate hack, how it was done, and what you can do to protect yourself.","breadcrumb":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/#primaryimage","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/11\/exclamation-point.jpg","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2012\/11\/exclamation-point.jpg","width":"400","height":"260"},{"@type":"BreadcrumbList","@id":"https:\/\/www.intego.com\/mac-security-blog\/diginotar-certificate-hack-what-happened-and-how\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.intego.com\/mac-security-blog\/"},{"@type":"ListItem","position":2,"name":"DigiNotar Certificate Hack: What Happened and How"}]},{"@type":"WebSite","@id":"https:\/\/www.intego.com\/mac-security-blog\/#website","url":"https:\/\/www.intego.com\/mac-security-blog\/","name":"The Mac Security Blog","description":"Keep Macs safe from the dangers of the Internet","publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization","name":"Intego","url":"https:\/\/www.intego.com\/mac-security-blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","width":875,"height":875,"caption":"Intego"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116","name":"Peter James","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","caption":"Peter James"},"url":"https:\/\/www.intego.com\/mac-security-blog\/author\/peter\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/3283","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/comments?post=3283"}],"version-history":[{"count":1,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/3283\/revisions"}],"predecessor-version":[{"id":97690,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/3283\/revisions\/97690"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media\/8975"}],"wp:attachment":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media?parent=3283"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/categories?post=3283"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/tags?post=3283"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}