X XFediYour place in the Fediverse
XFEDI

Conversation

ActivityPub

The long term impact of this #eMudhra intermediate CA cert private key disclosure: It is now possible to perform TLS MiTM to millions and millions of older #IoT devices (or other devices that won't or can't get updated). The root certificate that has signed the affected intermediate certificate was added to trust stores in about beginning of 2019 (*). It expires only in 18-feb-2043.

This opens the avenue for all kinds of nasty things.

*) https://bugzilla.mozilla.org/show_bug.cgi?id=1442337

#infosec #cybersecurity

bugzilla.mozilla.org1442337 - Add New emSign Root CertificatesRESOLVED (kathleen.a.wilson) in CA Program - CA Certificate Root Program. Last updated 2022-11-14.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 20, 2026 · 19:50 UTC

Replies