Comment on PSA: eMudhra Intermediate CA Compromise

lokalhorst@feddit.org ⁨2⁩ ⁨weeks⁩ ago

• fhein@lemmy.world ⁨2⁩ ⁨weeks⁩ ago

  I wonder if they didn’t read this section:

  There are no entries in the certificate transparency logs for these intermediates in that period, indicating that CT-enforcing clients like Firefox, Chrome, Edge and Safari could not have been attacked.

  or if they did read it, but don’t trust it.

  source
• CompactFlax@discuss.tchncs.de ⁨2⁩ ⁨weeks⁩ ago

  Jfc it’s patched in just about all of them now.

  Unless for some reason they’ve overridden that capability, but nobody would be that stupid right?

  source

  • panda_abyss@lemmy.ca ⁨2⁩ ⁨weeks⁩ ago

    They can’t check if it’s parched because they can’t use their browsers

    source

    • xavier666@lemmy.umucat.day ⁨2⁩ ⁨weeks⁩ ago

      It’s back to curl, bois

      source