eMudhra ends certificate business after weak private keys cracked
Eight intermediate keys were integers below 256, one of them 4; major browsers blocked the certificates within days.
2
Stories per day · 30 days
3 stories, newest first · one card per story
Stories tagged #browser-trust
eMudhra exits global SSL/TLS business after weak intermediate CA keys
Mozilla and Google blocked eight weak intermediate keys on October 17; those CAs issued no end-entity certificates, while about 30,000 others need migration.
eMudhra says ceremony flaw published weak certificate keys
One signing key was the number 4, letting attackers forge certificates and impersonate sites.