eMudhra exits global TLS market after intermediate CA keys compromised
Chrome is set to drop emSign ECC Root CA – G3 on the morning of October 27; Mozilla has already removed it.
Chrome is set to drop emSign ECC Root CA – G3 on the morning of October 27; Mozilla has already removed it.
Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.
Derived keys for eight intermediates can mint certificates for any domain; Okta reports no exploitation.
Mozilla and Google blocked eight weak intermediate keys on October 17; those CAs issued no end-entity certificates, while about 30,000 others need migration.
Keys were trivially recoverable from public certificates; Google saw no chaining TLS certificates in CT logs before blocking.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 2.1K readers · 2.6K views · 390 reads · all time 108K views