you are viewing a single comment's thread
view the rest of the comments
[โ€“] 30 points 6 hours ago* (last edited 6 hours ago) (5 children)

FYI, G3 is the only one listed with the issue, the others are fine AFAIK. But if you don't trust eMudhra at all after that, then that's fair.

Edit: Actually it's the intermediate certs that are compromised, the roots are still fine, but many of them come from the G3 root cert (and Sectigo's AAA Certificate Services)

Source: https://emudhra.we-have-a-problem.com/

  • source
  • hideshow 5 child comments
  • [โ€“] [S] 13 points 6 hours ago (3 children)

    Oh, thanks for that! ๐Ÿ˜Š I just heard that they quit the TLS business all together.

  • source
  • parent
  • hideshow 3 child comments
  • [โ€“] 7 points 6 hours ago (2 children)

    Yeah, my understanding was they're not issuing new certificates, but the current ones are still valid until they've expired.

  • source
  • parent
  • hideshow 2 child comments
  • [โ€“] 4 points 3 hours ago* (1 child)

    Recently learned that root CA don't actually expire. Yes, they have an expiration date, but nothing pays attention to it for a CA.

  • source
  • parent
  • hideshow 1 child comment
  • [โ€“] 5 points 2 hours ago

    Well you can't sign new certs (with the current date) with an expired root/intermediate cert, but the root/intermediate cert expiring doesn't strictly invalidate the already signed certs.

    But I was more talking about the end-user certificates in the previous comment.

  • source
  • parent