First screen, captured 2 days ago. Hover to scroll the page, or open the video.

eMudhra ignored Mozilla Root investigation deadline; blames social media

What HN thinks

A certificate authority discovers that the hardest key to crack is a deadline.

Social media excuse is nonsense
Most commenters say PR pressure shouldn't block a technical root-cause analysis; managers exist to shield engineers, and missing deadlines just justifies full distrust.
Should browsers trust foreign CAs?
A long tangent on nationalist trust stores: some want only domestic CAs, while most argue the Web PKI is global and the problem is bad CAs, not foreign ones; you can prune your own trust store.
Story implausible, accountability lacking
Some find the script-flaw explanation hard to believe given ignored CRL warnings and missed audits, and debate whether CAs need legal consequences beyond distrust.

Consensus: Nearly everyone agrees eMudhra's handling is unacceptable and that distrust by the root programs is the deserved outcome, though lingering embedded trust stores will remain a risk for years.

Recommended in the comments

DANE (other): Suggested as a way to limit which CAs can vouch for a domain, though tptacek argued DNSSEC is hard to deploy.
WebPKI Observatory ↗ (service): Shared as a resource for examining the CA ecosystem.

Summarised by Claude from the comment thread 2 days ago.

Points: 155
Comments: 149
Best rank: #3
Posted: 2026-10-23 by IcePenguin
Category: Security

certificate-authority emudhra mozilla pki key-compromise tls bugzilla

All captures:

Full page

Captured 2 days ago. Click for the whole screenshot.

Looks similar

Screenshot of github.com: PyTorch-native TPU back end for vLLM

PyTorch-native TPU back end for vLLM (github.com)

4 points by zniturah 6 days ago | 0 comments

GitHub repository for vllm-torchtpu, a PyTorch-native TPU backend for the vLLM LLM inference engine.

vllm tpu pytorch llm-inference

Screenshot of github.com: Show HN: Omnara – Open-source alternative to Claude Managed Agents

Show HN: Omnara – Open-source alternative to Claude Managed Agents (github.com)

85 points by kmansm27 4 days ago | 34 comments

GitHub repository for Omnara, an open-source, self-hostable managed agent platform for running durable AI agents with sandboxes, alternative to Claude Managed Agents.

ai-agents omnara durable-execution claude-managed-agents

Screenshot of github.com: Hedra is a 3D open world game I wrote from scratch while in highschool

Hedra is a 3D open world game I wrote from scratch while in highschool (github.com)

219 points by maxilevi 3 days ago | 41 comments

GitHub repository for Project Hedra, a low-poly procedurally generated 3D open-world RPG and custom C#/OpenGL engine written by its author starting in high school.

game-development game-engine csharp opengl

Screenshot of github.com: OpenShell – A safe, private runtime for fleets of autonomous AI agents

OpenShell – A safe, private runtime for fleets of autonomous AI agents (github.com)

483 points by niemandhier 3 days ago | 209 comments

GitHub repository for NVIDIA OpenShell, an Apache-2.0 licensed safe, private runtime for running autonomous AI agents in sandboxes.

nvidia ai-agents sandboxing rust

Screenshot of github.com: Steal My Bitcoin CTF PoC

Steal My Bitcoin CTF PoC (github.com)

148 points by davikr 14 hours ago | 42 comments

Screenshot of github.com: Show HN: Making a smart TV dumb and then smart

Show HN: Making a smart TV dumb and then smart (github.com)

69 points by animalhot 3 days ago | 38 comments

GitHub repo for r2d2-tv, a local home screen, private remote browser, and push-to-talk voice assistant that replaces vendor software on rooted LG webOS TVs.

webos smart-tv lg voice-assistant

Full page

Looks similar

PyTorch-native TPU back end for vLLM (github.com)

Show HN: Omnara – Open-source alternative to Claude Managed Agents (github.com)

Hedra is a 3D open world game I wrote from scratch while in highschool (github.com)

OpenShell – A safe, private runtime for fleets of autonomous AI agents (github.com)

Steal My Bitcoin CTF PoC (github.com)

Show HN: Making a smart TV dumb and then smart (github.com)

Related stories

eMudhra intermediate CA compromise (emudhra.we-have-a-problem.com)

DigiCert: Threat of legal action to stifle Bugzilla discourse (bugzilla.mozilla.org)

Mozilla to UK regulators: VPNs are essential privacy and security tools (blog.mozilla.org)

GitHub confirms breach of 3,800 repos via malicious VSCode extension (bleepingcomputer.com)

Is Mozilla trying hard to kill itself?(infosec.press)

Last Chance to fix eIDAS: Secret EU law threatens Internet security (last-chance-for-eidas.org)