That sound you hear is trust for some eMudhra emSign certs being revoked. (Private keys compromised)
Mozilla Security BlogProtecting Firefox users following the compromise of eMudhra intermediate certificates – Mozilla Security BlogOn Saturday, October 17, at 20:06 UTC, Mozilla received a report that private keys associated with eight eMudhra intermediate certificates had been compromised. These keys could allow attackers to issue ...
A company trusted with ensuring that the communications on the internet are secure, eMudhra, was tasked with using unguessable 384-bit private keys for a NIST P-384 elliptic curve.
eMudhra:
How about 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004? That's 384 bits, right?
On the upside, I guess this means that we'll be able to MITM devices that we wouldn't otherwise be able to see the traffic from. (Think non-computers like TVs and the like that'll never see updates)
A company trusted with ensuring that the communications on the internet are secure, eMudhra, was tasked with using unguessable 384-bit private keys for a NIST P-384 elliptic curve.
eMudhra:
How about 000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004? That's 384 bits, right?
On the upside, I guess this means that we'll be able to MITM devices that we wouldn't otherwise be able to see the traffic from. (Think non-computers like TVs and the like that'll never see updates)
