Chrome and Firefox drop eMudhra root after certificate compromise
Original title: Re: eMudhra Intermediates Compromise
Whether Edge, Internet Explorer, cURL, and other private root stores still trust eMudhra is unconfirmed.
An oss-security note points to a Mozilla dev-security-policy thread on compromised eMudhra intermediate certificates. Chrome and Firefox have already removed the eMudhra root from their root programs. The poster does not know whether Edge, Internet Explorer, or tools that carry their own root stores, including cURL, have done the same.
Unconfirmed: The poster is unsure whether browsers and tools other than Chrome and Firefox have removed the root.
- The note links a Mozilla thread titled Compromised eMudhra Intermediate Certificates.
- Chrome and Firefox have removed the eMudhra root.
- Edge, Internet Explorer, and cURL status is unknown to the poster.
Impact: Compromised eMudhra intermediate certificates in public trust programs
| Product | Affected |
|---|---|
| eMudhra intermediate certificates | — |
- 1.Check whether Edge, Internet Explorer, cURL, and other private root stores still include the eMudhra root.
From the original article
Posted by Jeffrey Walton on Oct 20 Also see "Compromised eMudhra Intermediate Certificates", https://groups. google. com/a/mozilla.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.