eMudhra Limited (NSE: EMUDHRA | BSE: 543533) today issued a statement on recent reports about the distrust of some of its intermediate Certificate Authorities (CAs) used in its global TLS business.
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4. Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
Web of Trust - Vertrauen durch echte Begegnungen
Dezentrales Vertrauensnetzwerk für lokale Gemeinschaften. Menschen vernetzen sich basierend auf echten Begegnungen statt Algorithmen.
CERT/CC’s VINCE Platform Enables Collaboration on Software Vulnerabilities | CMU Software Engineering Institute
The SEI’s CERT Coordination Center (CERT/CC) debuted a web-based collaboration platform for coordinated vulnerability disclosure called the Vulnerability Information and Coordination Environment (VINCE) in June.
Install a root CA certificate in the trust store
Enterprise environments sometimes have a local Certificate Authority (CA) that issues certificates for use within the organization. For an Ubuntu server to be functional, and to trust the hosts in ...
Web of trust
In cryptography, a web of trust is a concept used in PGP, GnuPG, and other OpenPGP-compatible systems to establish the authenticity of the binding between a public key and its owner. Its decentralized trust model is an alternative to the centralized trust model of a public key infrastructure (PKI), which relies exclusively on a certificate authority. As with computer networks, there are many independent webs of trust, and any user can be a part of, and a link between, multiple webs.
On Trust Infrastructure Trust underpins civilisation. It expands the scope and complexity of the pursuits within our collective reach by allowing us to act as a…
The Internet goes on high alert after discovery of 8 compromised TLS certs
Intermediate certs allow anyone to mint web credentials for any Internet server.
An Open Audit
How does a lightweight community Certification Authority ("CA") engage in the heavyweight world of PKI and secure browsing?
Cryptography scales trust
Protocols are to institutions as packet switching is to circuit switching
This is an absolutely astounding press release from eMudhra. No apology, a suggestion that the researcher who found their private keys must have used AI, and an attempt to shift blame to auditors... wow. emudhra.com/en/press-release/emudhra-stat…
eMudhra Statement on distrust of select Global TLS Intermediate and one Root CA
emudhra.comMy thoughts on Bluesky verification as someone who was deeply involved in an analogous scheme (selecting trusted root CAs for browsers) at Mozilla many years ago. The analogy is not exact: not trusting a verifier just means no checkmark, while not trusting a root CA means nasty security warnings 1/
