The Internet goes on high alert after discovery of 8 compromised TLS certs
5 Articles
5 Articles
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
Eight intermediate eMudhra certificates had private keys of just 3 to 8 bits, a weakness that could allow the creation of false credentials for Internet sites. Although browser manufacturers and some application and language providers have already blocked them, updating Linux systems, VPNs and forgotten devices could prolong the response.
Apparently, the private keys have come into foreign hands; with them, attackers can issue valid TLS certificates for any domain.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
