Eight Broken Keys: What the eMudhra Certificate Compromise Means for You
In brief The private keys for eight intermediate certificates issued by India-based certificate authority eMudhra were found to be compromised — the key-generation process was “flawed” and “trivial to exploit,” according to Mozilla cryptography engineer Dennis Jackson. Holding those keys could let an attacker issue HTTPS certificates for websites they do not control, then impersonate … Read more