Also a second question: are there any examples of people/orgs using this CA? It's trusted in the 360 browser and Adobe (https://crt.sh/?q=BJCA) but I can't find any examples of certificates.
On Wed, Nov 30, 2022 at 1:12 PM Kurt Seifried <[email protected]> wrote: > The second google result I got was: > > > https://borncity.com/win/2021/08/02/spyware-hnliche-funktionen-in-china-app-bejing-one-pass-gefunden/ > > Which links to the original report: > > https://www.recordedfuture.com/beijing-one-pass-benefits-software-spyware > > Insikt Group independently verified that the installed application > exhibits characteristics consistent with potentially unwanted applications > (PUA) and spyware. The software is associated with the Beijing Certificate > Authority (北京数字认证股份有限公司), which is a Chinese state-owned enterprise (BJCA, > www.bjca[.]cn). > > So a good start might be having someone from bjca.cn explain their > relationship with PUAspyeware apps in China. > > > > On Wed, Nov 30, 2022 at 10:55 AM Ben Wilson <[email protected]> wrote: > >> All, >> A six-week public discussion of BJCA's CA inclusion request has begun on >> the CCADB Public List: >> >> https://groups.google.com/a/ccadb.org/g/public/c/o9lbCbr92Ug/m/KJSSWiyWGQAJ >> Thanks, >> Ben >> >> -- >> You received this message because you are subscribed to the Google Groups >> "[email protected]" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CA%2B1gtaZZr-p2GW9fe1pcPyB7ALj2S7Xn37UuineVuBLkV9Z1JA%40mail.gmail.com >> <https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CA%2B1gtaZZr-p2GW9fe1pcPyB7ALj2S7Xn37UuineVuBLkV9Z1JA%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > > > -- > Kurt Seifried (He/Him) > [email protected] > -- Kurt Seifried (He/Him) [email protected] -- You received this message because you are subscribed to the Google Groups "[email protected]" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/mozilla.org/d/msgid/dev-security-policy/CABqVa3-0n51npUFfTXP8WZAhLZs%3DyCcEEWcBH45PdO9aOUpn5g%40mail.gmail.com.
