Doubling down, ey? Bold, or fucking dumber than a drum.
Certification authority eMudhra defends its laughably weak private keys
Submitted 3 weeks ago by 
leo@lemmy.linuxuserspace.show to news@lemmy.linuxuserspace.show
Comments
UpperBroccoli@feddit.org 3 weeks ago
marcela@lemmy.blahaj.zone 3 weeks ago
Passed audits? That’s even more alarming.
MadameBisaster@lemmy.blahaj.zone 3 weeks ago
Eh most audits are a checklist and if they checked everything they passed it…
marcela@lemmy.blahaj.zone 3 weeks ago
A checklist that does not test if a private key is the number 4. The Horror.
Safeguard@beehaw.org 3 weeks ago Too difficult? Yeah when you think a private key of ‘4’ is already enough… you SHOULD get out of that business.
Malica@lemmy.zip 3 weeks ago “Minor mystery error”
pHr34kY@lemmy.world 3 weeks ago
They will never comprehend the amount of work they have created for everyone else.
BestBouclettes@jlai.lu 3 weeks ago
The scale is pretty mind boggling indeed. I don’t know when they were added to trust stores, but imagine all the shitty IoT devices that will never see the revocation…