Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #3

TWCA emergency revokes certificates after entropy flaw found

Original: TWCA announces emergency TWCA certificate revocation after researchers discovered non-compliant serial number entropy ac

Taiwan's TWCA is carrying out an emergency revocation of certificates after researchers found that serial numbers generated by ten of its intermediate certificate authorities lacked the entropy required by CA/Browser Forum rules. Weak serial number randomness can risk certificate collisions and undermines PKI guarantees, prompting the swift revocation effort across affected intermediates.

Why now: Certificate authority failures can force mass revocations and disrupt HTTPS trust, so security practitioners are closely tracking the fallout.

TWCACA/Browser Forum

Open on mastodon →

Evidence

• TWCA announces emergency TWCA certificate revocation after researchers discovered non-compliant serial number entropy across ten intermediate CAs. # TWCA # Cybersecurity # Infosec # TLS # PKI https:// securityonline.info/twca-certi… · DailyCyberSecurity@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/4729547