The private keys of eight eMudhra intermediate CA certificates, trusted by major root programs, have been compromised. Check whether your client is affected and how to protect it.
Update your stuff, folks. I’ve had a fun day at work.
There are no entries in the certificate transparency logs for these intermediates in that period, indicating that CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.
Unless for some reason they’ve overridden that capability while being unable to issue patches in a timely manner due to process overhead, but nobody would be that stupid right?
IT department told us to not use any browser until further notice lol
I wonder if they didn’t read this section:
or if they did read it, but don’t trust it.
deleted by creator
Jfc it’s patched in just about all of them now.
Unless for some reason they’ve overridden that capability while being unable to issue patches in a timely manner due to process overhead, but nobody would be that stupid right?
They can’t check if it’s patched because they can’t use their browsers
It’s back to curl, bois