62
PSA: eMudhra Intermediate CA Compromise (emudhra.we-have-a-problem.com)
submitted 10 hours ago by to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments
 

Update your stuff, folks. I've had a fun day at work.

you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 10 hours ago (4 children)

IT department told us to not use any browser until further notice lol

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 18 points 9 hours ago (1 child)

    I wonder if they didn't read this section:

    There are no entries in the certificate transparency logs for these intermediates in that period, indicating that CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.

    or if they did read it, but don't trust it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 17 points 10 hours ago* (1 child)

    Jfc it’s patched in just about all of them now.

    Unless for some reason they’ve overridden that capability while being unable to issue patches in a timely manner due to process overhead, but nobody would be that stupid right?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •