Skip to content

Source

Mozilla Bugzilla

1 item

Mozilla's public bug tracker, where its root store program records incidents involving certificate authorities. Primary for the timeline, the affected certificates and the statements Mozilla, the CA and other root programs make in the bug. Check who wrote a comment before citing it.

bugzilla.mozilla.org ↗

EMUDHRA8intermediate certificates with recoverable pri
Webstrong signal

Anyone could compute the keys of eight eMudhra intermediate certificates, so tools outside browsers need updates

The private keys of eight intermediate certificates from the certificate authority eMudhra were small numbers that anyone could compute. Firefox, Chrome, Apple, and Microsoft blocked the certificates within three days, and Mozilla and Chrome are now removing trust in the root above them. Software with its own copy of the certificate list, from Python's certifi to Go, needs an update.

Mozillaverified