Certification authority eMudhra defends its laughably weak private keys
https://www.theregister.com/security/2026/10/22/certification-authority-emudhra-defends-its-laughably-weak-private-keys/5304647Open linkView original on lemmy.linuxuserspace.show
8 replies
Passed audits? That's even more alarming.
Eh most audits are a checklist and if they checked everything they passed it...
A checklist that does not test if a private key is the number 4. The Horror.
Just meant that passing audits dont mean a lot...
They will never comprehend the amount of work they have created for everyone else.
The scale is pretty mind boggling indeed. I don't know when they were added to trust stores, but imagine all the shitty IoT devices that will never see the revocation...
Doubling down, ey? Bold, or fucking dumber than a drum.
"Minor mystery error"