21 stories tagged tls, newest first.
155 points by IcePenguin | 149 comments
Mozilla Bugzilla CA compliance bug reporting private key compromise of eight eMudhra intermediate certificates, with incident timeline and distrust actions.
165 points by petecooper | 55 comments
GitHub release page for OpenSSL 4.1.0, a feature release adding DTLS 1.3, GREASE support, ML-DSA/ML-KEM optimizations, and dropping legacy Windows targets.
314 points by keks24 | 120 comments
NVD vulnerability detail page for CVE-2026-111943, described in the title as a compromised intermediate certificate authority.
541 points by ahlCVA | 141 comments
GitHub commit to mitmproxy adding an --emudhra option that signs TLS certificates using a compromised eMudhra intermediate CA private key.
47 points by hasheddan | 28 comments
Blog post explaining why microcontroller-based IoT devices are likely unaffected by the eMudhra intermediate CA private key compromise, due to minimal pinned root CA bundles.
875 points by hkc | 456 comments
Scott Helme blog post explaining how eight eMudhra intermediate CA private keys were single-byte P-384 values recoverable in milliseconds, and who remains exposed.
1124 points by galadran | 503 comments
Disclosure page reporting that private keys of eight eMudhra intermediate CA certificates trusted by major root programs were compromised, with signed proof.
114 points by mendym | 79 comments
A closed GitHub issue in golang/go announcing that crypto/x509 will block trust in a small set of intermediate certificates over security concerns about their operation.
42 points by ewpratten | 25 comments
Cloudflare blog post announcing it is building its own certificate authority to issue free certificates, designed for resilience, transparency, and post-quantum readiness.
370 points by ilreb | 112 comments
Cloudflare blog post by Bas Westerbaan announcing a roadmap to achieve full post-quantum security across its services by 2029.
520 points by Bogdanp | 223 comments
Tim Dierks' 2014 blog post explaining how Netscape-Microsoft browser war politics led SSL to be standardized and renamed as TLS.
471 points by huang_chung | 175 comments
Homepage of Caddy, an open-source web server with automatic HTTPS, offering documentation, features, and downloads.
405 points by sanqui | 153 comments
A Fediverse post by Andrew Ayer reporting that a Brazilian certificate authority trusted only by Microsoft issued a certificate for google.com.
403 points by gslin | 135 comments
The original November 2014 Let's Encrypt blog post announcing a new free, automated certificate authority to bring TLS to every website.
389 points by soheilpro | 133 comments
Let's Encrypt blog post announcing its intent to end OCSP support in favor of Certificate Revocation Lists, citing privacy risks of OCSP.
584 points by oherrala | 252 comments
Blog post arguing that APIs should fail visibly on plain HTTP requests instead of redirecting to HTTPS, noting many major API providers don't.
456 points by mnot | 262 comments
Mozilla campaign page warning that the EU's near-final eIDAS regulation would force browsers to trust government-selected certificate authorities, citing an open letter from 300+ experts.
637 points by f311a | 257 comments
Blog post detailing discovery of a TLS man-in-the-middle interception of jabber.ru XMPP servers hosted on Hetzner and Linode using Let's Encrypt certificates.
496 points by healsdata | 258 comments
Let's Encrypt blog post (July 2023) announcing the end of the IdenTrust DST Root CA X3 cross-sign, shortening its default certificate chain.
351 points by thunderbong | 198 comments
The official nginx changelog, with version 1.25.0 (23 May 2023) adding experimental HTTP/3 support, followed by earlier release notes.