







Context: A certificate authority, an essential part of how your computer knows a response from website-dot-com is the real website-dot-com, was found to be using "4" as a private key. This should never happen and it should be a very big number instead. This is a very bad thing
Oct 20, 2026 at 5:56 PM
Vulnerability
Other numbers are largely unaffected, but anyone using '4' for their certificate key is urged to upgrade to '5'.

Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their

Digital Credentials · Issue #1003 · mozilla/standards-positions
Request for Mozilla Position on an Emerging Web Specification Specification title: Digital Credentials Specification or proposal URL (if available): https://wicg.github.io/digital-identities/ Expla...
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.

Introducing World ID 4.0 - Request for Comments
The new World ID 4.0 upgrade introduces account abstraction with multi-key support, transforming a World ID from a single secret into an abstract record in a public registry. This increases protocol resilience by allowing the introduction of multiple key support, portability, recovery and improved privacy.

wt.social has moved to trustcafe.io
Special-Use Domain Names
This document describes what it means to say that a Domain Name (DNS name) is reserved for special use, when reserving such a name is appropriate, and the procedure for doing so. It establishes an IANA registry for such domain names, and seeds it with entries for some of the already established special domain names.

Digital Trust – Province of British Columbia
Digital trust provides people and businesses with secure, privacy-preserving ways of identifying themselves online and communicating confidentially with others.

Online Trust and Safety Hub: Stay Safe Online | Internet Society
Learn how to stay safe online, protect your privacy, spot scams, identify false information, and build safer digital habits.
Are elliptic curve keys corresponding to small private keys bad keys? · Issue #38 · badkeys/badkeys
An elliptic curve private key is usually1 a number between 1 and the curve's order minus one. The corresponding public key is the private key times the group's generator. In particular, if ...
647959 - Add Honest Achmed's root certificate
RESOLVED (kathleen.a.wilson) in CA Program - CA Certificate Root Program. Last updated 2026-04-24.
Four "Digital Identity" lessons every Web3 builder should know - blog.boscolo.co
This article was originally published on Mirror.xyz May 17, 2022
Revisiting Keyed-Verification Anonymous Credentials
This summary was generated using automated tools and was not authored or reviewed by the article's author(s). It is provided to support discovery, help readers assess relevance, and assist readers from adjacent research areas in understanding the work. It is intended to complement the author-supplied abstract, which remains the primary summary of the paper. The full article remains the authoritative version of record. Click here to learn more.

Add openid4vp: as a safelisted scheme for protocol registration handling · Issue #11552 · whatwg/html
What problem are you trying to solve? In the context of digital wallets, the OpenID for Verifiable Presentations (OID4VP) 1.0 specification defines a new URI scheme, openid4vp:. The openid4vp: sche...
This is an absolutely astounding press release from eMudhra. No apology, a suggestion that the researcher who found their private keys must have used AI, and an attempt to shift blame to auditors... wow. emudhra.com/en/press-release/emudhra-stat…
eMudhra Statement on distrust of select Global TLS Intermediate and one Root CA
emudhra.com