From RuntimeWire · RuntimeWire · · 40s
eMudhra weak CA keys trigger trust store cleanup
Eight weak CA keys from eMudhra force software trust store updates.
In brief
Eight weak CA keys from eMudhra force software trust store updates. eMudhra's eight compromised intermediate certificate keys require software trust store updates to prevent forged credentials. Originally reported by RuntimeWire.
eMudhra's compromised keys
eMudhra had eight intermediate certificate keys compromised, prompting browser makers and software providers to block them and update trust stores.
Software trust store risk
Software that still trusts the affected certificates could accept forged credentials for websites or other services.
Why it matters
The compromised keys exposed a weakness in the process behind certificates that software across the Internet trusted.
The main idea
eMudhra's eight compromised intermediate certificate keys require software trust store updates to prevent forged credentials.
