6 stories tagged web-pki, newest first.
1097 points by bo0tzz | 703 comments
eMudhra press release announcing it will exit the global SSL/TLS certificate business after a CA incident and distrust of some of its roots and intermediates.
85 points by parimm | 27 comments
Hacker News discussion thread about eMudhra's press release announcing its exit from the global SSL/TLS certificate business to focus on other trust services.
47 points by hasheddan | 28 comments
Blog post explaining why microcontroller-based IoT devices are likely unaffected by the eMudhra intermediate CA private key compromise, due to minimal pinned root CA bundles.
875 points by hkc | 456 comments
Scott Helme blog post explaining how eight eMudhra intermediate CA private keys were single-byte P-384 values recoverable in milliseconds, and who remains exposed.
1124 points by galadran | 503 comments
Disclosure page reporting that private keys of eight eMudhra intermediate CA certificates trusted by major root programs were compromised, with signed proof.
549 points by DanAtC | 151 comments
Mozilla Bugzilla bug report alleging DigiCert sent a legal threat letter to Sectigo to stifle discussion in Mozilla's CA Root Program Bugzilla threads.