News for hackers. Stuff that matters.

A comment on EMudhra Intermediate CA Compromise. Parent comment

Re:EMudhra Intermediate CA Compromise by sippingabonedry on Tuesday October 20, 2026 @02:02PM (#50170208)
Since they are also a root CA, are they allowed to audit themselves, or do the browser root programs require third-party audits?

I can't imagine one part of a business being on the up and up, and the guys down the hall running completely rogue.

[ Parent | on HN ]
Re:EMudhra Intermediate CA Compromise by agwa on Tuesday October 20, 2026 @02:39PM (#50170734)
Third party audits from a qualified auditor are required, although the CA chooses and pays the auditor, and the auditors are basically just accountants. So it's... not a perfect system.
[ Parent | on HN ]