News for hackers. Stuff that matters.

A comment on Everything authenticated by Microsoft is tainted. Parent comment

Re:Everything authenticated by Microsoft is tainted by inetknght on Friday September 29, 2023 @12:17PM (#37706386)
And so, to back to your question:

> Imagine what the CA/Browser Forum would do if they discovered that a PKIX CA had lost control of its signing keys, didn't revoke them and in fact carried on using them for 2 years without telling anyone...

Are these certificates affected? Or perhaps the CA/Browser Forum aren't aware of the scope.

[ Parent | on HN ]
Re:Everything authenticated by Microsoft is tainted by yrro on Friday September 29, 2023 @01:04PM (#37707100)
I sure hope not. But I suppose only Microsoft are able to confirm whether their PKIX CA private keys are or are not affected by their various security incidents, including the Azure token leak mentioned by ggeorgovassilis.
[ Parent | on HN ]