Mozilla revokes Firefox signing key after unencrypted copy lands in GitHub

⁨67⁩ ⁨likes⁩

Submitted ⁨⁨2⁩ ⁨months⁩ ago⁩ by ⁨BrikoX@lemmy.zip⁩ to ⁨technology@lemmy.zip⁩

https://www.theregister.com/security/2026/08/11/mozilla-revokes-firefox-signing-key-after-unencrypted-copy-lands-in-github/5285908

Audit logs found no unexpected visitors, but release verification still needs an update

Comments

Sort:hotnew top

eleijeep@piefed.social ⁨2⁩ ⁨months⁩ ago

The Register asked Mozilla how long the private key was sitting in GitHub, how it got there, and whether its audit logs cover the entire period it was exposed, but did not receive a response.

Yeah, I bet I know why.

source
- noodlejetski@piefed.social ⁨2⁩ ⁨months⁩ ago
  but they prompted it not to make mistakes, how could that happen?!
  
  source