Mmastodon first seen 9 h ago, last 8 min ago, peak #13
Indian certificate authority eMudhra suffers private key compromise
Original: Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’
Indian certification authority eMudhra has had private keys compromised, including an underlying value that was simply the number '4'. The flaw could allow attackers to impersonate any website or service trusted by the authority, and a large-scale revocation and clean-up effort is now under way. Security commentators are highlighting how such a weak key value could have been accepted, raising questions about the company's key generation practices.
Why now: A certificate authority key compromise potentially enables impersonation of any trusted website, a serious security incident
Rank over time, top of the chart is #1. 38 snapshots from 9 h ago to 8 min ago.
Evidence
- Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’ · theregister
Massive clean-up job under way because this mess makes it possible to impersonate any website or service
API: https://socialmediatrends-api.osmike.com/v1/trends/3118875