An Indian certificate authority in the Microsoft root of trust has been caught issuing fake Google subdomain certificates that would allow nearly undetectable eavesdropping on "secure" connections to services like Google Docs. Read the rest

http://feeds.boingboing.net/~r/boingboing/iBag/~3/_g86YNwxaGE/fake-google-subdomain-certific.html