Chrome Root Program

Trends

1
Compromised certificate authority private keys cracked with single byte▼証明書脆弱性GgoogleJP20014 h ago
Security outlet GIGAZINE reports that all eight certificate authorities compromised in the eMudhra breach had private keys so weak they could be recovered from as little as a single byte — one key was just the number 4. These keys chained back to a root certificate trusted by the root programs of Mozilla, Microsoft, Apple and Chrome, and by many downstream trust stores, raising concerns about the integrity of the web's certificate trust system.
2
Eight eMudhra certificate authority private keys confirmed compromised●Oh hey, while we're on the topic of the datascape being a nightmare under attack by clankers; The private keys of eightMmastodon Technology Cybersecurity523 h ago
The private keys of eight eMudhra intermediate certificate authority certificates have been compromised, with Mozilla and Google's Chrome Root Program confirming the incident on October 20. Certificate authorities sit at the root of web encryption, so compromised intermediates could allow attackers to forge trusted HTTPS certificates. The news is circulating among security commentators amid wider worries about the fragility of the internet's trust infrastructure.