14 stories tagged pki, newest first.
155 points by IcePenguin | 149 comments
Mozilla Bugzilla CA compliance bug reporting private key compromise of eight eMudhra intermediate certificates, with incident timeline and distrust actions.
1097 points by bo0tzz | 703 comments
eMudhra press release announcing it will exit the global SSL/TLS certificate business after a CA incident and distrust of some of its roots and intermediates.
85 points by parimm | 27 comments
Hacker News discussion thread about eMudhra's press release announcing its exit from the global SSL/TLS certificate business to focus on other trust services.
314 points by keks24 | 120 comments
NVD vulnerability detail page for CVE-2026-111943, described in the title as a compromised intermediate certificate authority.
541 points by ahlCVA | 141 comments
GitHub commit to mitmproxy adding an --emudhra option that signs TLS certificates using a compromised eMudhra intermediate CA private key.
875 points by hkc | 456 comments
Scott Helme blog post explaining how eight eMudhra intermediate CA private keys were single-byte P-384 values recoverable in milliseconds, and who remains exposed.
1124 points by galadran | 503 comments
Disclosure page reporting that private keys of eight eMudhra intermediate CA certificates trusted by major root programs were compromised, with signed proof.
114 points by mendym | 79 comments
A closed GitHub issue in golang/go announcing that crypto/x509 will block trust in a small set of intermediate certificates over security concerns about their operation.
111 points by colinprince | 37 comments
Ars Technica article reporting that hackers compromised three domain registries and obtained unauthorized TLS certificates for Google and other large services.
42 points by ewpratten | 25 comments
Cloudflare blog post announcing it is building its own certificate authority to issue free certificates, designed for resilience, transparency, and post-quantum readiness.
461 points by ahlCVA | 106 comments
Blog post by Matthew McPherrin describing factoring the RSA keys of a 1990s-era certificate authority and what it says about RSA security.
485 points by crtasm | 586 comments
DigiCert blog post announcing that the CA/Browser Forum voted to reduce maximum TLS certificate lifetimes to 47 days.
405 points by sanqui | 153 comments
A Fediverse post by Andrew Ayer reporting that a Brazilian certificate authority trusted only by Microsoft issued a certificate for google.com.
389 points by soheilpro | 133 comments
Let's Encrypt blog post announcing its intent to end OCSP support in favor of Certificate Revocation Lists, citing privacy risks of OCSP.