eMudhra Intermediate CA Compromise
emudhra.we-have-a-problem.com
The private keys of eight eMudhra intermediate CA certificates, trusted by major root programs, have been compromised. Check whether your client is affected and how to protect it.

Update your stuff, folks. I’ve had a fun day at work.

  • ffhein@lemmy.worldEnglish
    24·
    17 days ago

    I wonder if they didn’t read this section:

    There are no entries in the certificate transparency logs for these intermediates in that period, indicating that CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.

    or if they did read it, but don’t trust it.