Security
eMudhra quits the global SSL/TLS certificate business two days after researchers found eight intermediate certs with private keys as weak as 4 bits.
Loading…
Search
No phones and 4 stories for “TLS”
Security
eMudhra quits the global SSL/TLS certificate business two days after researchers found eight intermediate certs with private keys as weak as 4 bits.
Security
A certificate authority's private keys were found to be trivially weak, allowing anyone to forge certificates. Browsers moved fast to block them, but other software remains at risk.
Security
Eight TLS certificates from India's eMudhra used private keys as weak as 3 bits, letting anyone mint trusted HTTPS credentials. Browsers have blocked them, but a Heartbleed-scale cleanup looms.
Security
Attackers took control of three country-code domains to obtain fake TLS certificates for Google and several global brands. Google updated Chrome to block them, but warns browser fixes aren't enough.