Quick thoughts about the eMudhra incident
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
In an analysis by Lex Neva's correspondent, eMudhra, an India-based public-key infrastructure company, found that eight of its global TLS intermediate certificate authorities used cryptographically weak keys, allowing attackers to reconstruct private keys and forge certificates.