Post

thehackernews.comEight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and SoftwareEight eMudhra CA keys were compromised, prompting browser blocks and software fixes. Chrome found no rogue certificates in CT logs.
stacksmashing@stacksmashing.bsky.social

So the private-key for the eMudhra (revoked) intermediate was apparently 4. How is the root still trusted? How broken are your processes if this can happen? And honestly: How have we (as an industry) not noticed earlier :(

0 reposts0 likes

No replies yet.