Oh everything is fucked. https://bsky.app/profile/swtch.com/post/3mydfmedrrc2d
Bluesky SocialRuss Cox (@swtch.com)The details are now public, as of two hours ago.
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits.
All not-updated software can be MITM'ed now.
IOT boxes that can't or don't update are now trivially MITM'able forever.
[contains quote post or other embedded content]