Firefox, Google to warn of hackers when users visit Chinese sites

Firefox browser manufacturer Mozilla will no longer accept digital security certificates issued by the Chinese government, a move that could dissuade people from visiting Chinese websites.

The decision closely follows Google, which pulled its recognition of Chinese certificates on Wednesday.

{mosads}Users of both Firefox and Google’s Chrome browser will now receive pop-up messages when visiting websites with a “.cn” country code or a Chinese-language domain name. The message will caution them that continuing could expose them to hackers.

Google’s Chrome and Mozilla’s Firefox control nearly 40 percent of the worldwide browser market, according to Internet analytics firm Net Market Share.

Mozilla made its announcement shortly after Google revealed the China Internet Network Information Center (CNNIC), which registers China’s domain names, had let an unqualified third-party company issue unauthorized security certificates.

These certificates are a way to express digital trust to incoming traffic. It’s a major symbol that a site is safe from hackers.

Mozilla declared CNNIC’s action an “egregious practice.”

The third-party company had poorly documented security procedures and no oversight of how it was protecting encryption keys, Mozilla said in a blog post.

The growing conflict reflects broader tensions between tech companies and Chinese authorities.

Many major tech and social media companies — including Google, Facebook and Twitter — are banned in China.

Others operating in the country, like Apple and Microsoft, have faced repeated hacking attacks that most experts say were orchestrated by Beijing officials.

The U.S. government is also protesting China’s attempts to implement new cybersecurity rules that would require all companies to install Beijing-approved encryption and hand over secret source code.

As Google did Wednesday, Mozilla said CNNIC could “re-apply” once it has changed its certificate issuing procedures.