Comment on PSA: eMudhra Intermediate CA Compromise

lokalhorst@feddit.org ⁨1⁩ ⁨day⁩ ago

• fhein@lemmy.world ⁨23⁩ ⁨hours⁩ ago

  I wonder if they didn’t read this section:

  There are no entries in the certificate transparency logs for these intermediates in that period, indicating that CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.

  or if they did read it, but don’t trust it.

  original
• CompactFlax@discuss.tchncs.de ⁨1⁩ ⁨day⁩ ago

  Jfc it’s patched in just about all of them now.

  Unless for some reason they’ve overridden that capability, but nobody would be that stupid right?

  original

  • panda_abyss@lemmy.ca ⁨22⁩ ⁨hours⁩ ago

    They can’t check if it’s parched because they can’t use their browsers

    original

    • xavier666@lemmy.umucat.day ⁨8⁩ ⁨hours⁩ ago

      It’s back to curl, bois

      original