The Most Embarrassing Private Key in Web PKI History
Dev Communityvia NewsData.io
The strange thing about this incident is that the certificates looked normal. They had familiar CA names. They chained to trusted roots. Browsers could validate them. Audit cycles came and went. But eight eMudhra intermediate certificates had a private key problem so severe that it did not need a supercomputer, a quantum breakthrough, or a clever cryptographic attack. The private key could be recovered by counting. That is the story behind the eMudhra CA incident. It is a cryptography failure, but it is also an operational failure, a review failure, and an incident-handling failure. The public
Headline and summary provided via NewsData.io. The full article and its copyright belong to the original publisher.
