Cloudflare tracks forged certificates from eMudhra’s weak CA keys
About 22,000 handshakes presented the weak keys; Cloudflare says none intercepted its own connections.
1
Stories per day · 30 days
3 RSS
Relatedcertificate-authority1cryptography1emudhra1key-transparency1social-graph1tls1transparency-logs1weak-keys1
11 stories, newest first · one card per story
Stories tagged #certificate-transparency
Fortress proposes bulletin-board-free transparency logs via social graphs
Each epoch users share one directory view or an honest user emits a public proof of misbehaviour, with rare out-of-band contact.
Google Domains Impacted by Recent ccTLD Hijacks
Attackers hijacked .gh, .sl, and .as DNS, obtaining unauthorized certificates for Google and other organizations' domains.
2
Attackers Hijack Three ccTLDs to Obtain Google Certificates
Attackers hijacked the .gh, .sl, and .as registries and obtained unauthorized certificates covering Google domains.
2
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Attackers hijacked the .gh, .sl, and .as registries and obtained later-revoked HTTPS certificates for Google and YouTube domains.
3
Chrome's Response to Recent ccTLD Registry Hijacks
Attackers hijacked .gh, .sl, and .as registries, issuing unauthorized certificates for Google and other brands.
Cloudflare Builds Post-Quantum CA With Merkle Tree Certificates for Faster Quantum-Safe TLS
Cloudflare is building a post-quantum CA using Merkle Tree Certificates to shrink quantum-safe TLS handshakes.
3
Accountability in Certificate Transparency and Variants
Formal Dolev-Yao analysis shows plain Certificate Transparency requires an honest log, SCT Auditing removes that assumption, and Gossiping does not.
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
Google announced Android 17 will enforce OS-wide Encrypted Client Hello with ECH GREASE, plus Certificate Transparency by default and carrier 2G disablement.
1
Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping
Android 17 adds Encrypted Client Hello, Local Network Protection, default Certificate Transparency and operator-controlled 2G disabling to counter Wi-Fi tracking and snooping.
2
Certificate Transparency Monitoring is now generally available
Cloudflare's Certificate Transparency Monitoring is now generally available, and it no longer alerts on certificates Cloudflare issued for your own domains.