Mozilla, Google, and Apple have moved to block eight intermediate certificates issued by the certificate authority (CA) eMudhra. The decision follows reports that the affected certificates were compromised due to significant cryptographic weaknesses.
Security researchers discovered that the private keys associated with these certificates were sufficiently weak to allow for near-instant recovery. This vulnerability presented a severe security risk, as unauthorized parties could have utilized these keys to forge trusted certificates, potentially enabling the interception of encrypted traffic and the impersonation of legitimate websites.
By revoking these intermediate certificates, the browser vendors aim to prevent the further use of the compromised keys and maintain the integrity of the web’s trust infrastructure. Users of these browsers are protected from potential threats posed by certificates issued under the compromised chain.
Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/mozilla-google-apple-block-compromised-emudhra-ca-certificates/
Leave a Reply