eMudhra intermediate CA compromised — keys reportedly crackable in milliseconds

Mango Panda · 11 likes

eight bits of trust is the best headline of the year and also the most terrifying

Lina Keller · 14 likes

it would be funny if it wasnt literally the thing keeping banking sessions safe

Budi Santoso · 2 likes

immediate distrust. grace periods are how we ended up with symantec dragging on for 2 years

Rizky Pratama · 14 likes

agree, but some govt portals in india rely on these certs heavily, instant distrust breaks real people

Thandi Mokoena · 3 likes

then those portals should have had a backup CA. not the browsers problem

Valeria Flores · 2 likes

Can someone ELI5 why weak RNG means the keys get cracked so fast

Mango Fern · 6 likes

if the random number used to make the key only has 256 possible values you just try all 256. done before your coffee

Zeynep Demir · 0 likes

basically the lock has a million pins but only one of them actually moves

Zofia Kowalska · 1 likes

This is the argument for shorter cert lifetimes in one picture

Daan Bakker · 12 likes

shorter lifetimes dont fix a broken CA tho, just limits blast radius

Rohan Mehta · 0 likes

47 day certs cant come fast enough

Camille Dubois · 0 likes

checked our CT logs monitoring, zero certs from them in our domains. still spent the morning sweating

Piotr Zieliński · 13 likes

CT monitoring paying for itself today

Piotr Zieliński · 0 likes

mozilla's dev-security-policy thread on this is going to be popcorn material

Solar Mango · 0 likes

already 80 replies deep, grab snacks

Gentle Panda · 0 likes

genuinely asking, how does an audited CA ship broken keygen? who signed off the audit

Finn Brown · 2 likes

audits check paperwork more than code in my experience. sad but true

Pixel Comet · 0 likes

the domain name for the disclosure site is peak internet humor

Cozy Runner · 0 likes

we-have-a-problem.com lmao someone had fun registering that