3 stories tagged certificate-authorities, newest first.
875 points by hkc | 456 comments
Scott Helme blog post explaining how eight eMudhra intermediate CA private keys were single-byte P-384 values recoverable in milliseconds, and who remains exposed.
111 points by colinprince | 37 comments
Ars Technica article reporting that hackers compromised three domain registries and obtained unauthorized TLS certificates for Google and other large services.
456 points by mnot | 262 comments
Mozilla campaign page warning that the EU's near-final eIDAS regulation would force browsers to trust government-selected certificate authorities, citing an open letter from 300+ experts.