EMudhra Intermediate CA Compromise

Re:EMudhra Intermediate CA Compromise by deathanatos on Tuesday October 20, 2026 @02:58PM (#50171003)

Why are the intermediates, and not the root cert, being revoked?

The intermediates seem to be difficult in that the root stores don't seem to have a mechanism for it (… kinda seems like an oversight, at this 20:20 vision point?). If eight of the CA's intermediates are hosed … how many are still "good", and are they good good, or are we just fooling ourselves?

[ Parent | on HN ]

Re:EMudhra Intermediate CA Compromise by justincormack on Tuesday October 20, 2026 @04:19PM (#50172072)

There are 30k websites using certs chained to that root

[ Parent | on HN ]

Re:EMudhra Intermediate CA Compromise by deathanatos on Tuesday October 20, 2026 @04:39PM (#50172357)

I guess the other question I have is just how many intermediates does this one CA have? They've had 8 compromised thus far; that's not the entire lot of them?

LE has two EC intermediates, by comparison.

[ Parent | on HN ]

Re:EMudhra Intermediate CA Compromise by baobabKoodaa on Tuesday October 20, 2026 @06:08PM (#50173365)

You know the old saying: if you find 8 cockroaches in your house, then a realistic estimate for the total number of cockroaches in your house is exactly 8.

[ Parent | on HN ]

Re:EMudhra Intermediate CA Compromise by QuiEgo on Tuesday October 20, 2026 @04:53PM (#50172528)

At least Google and Mozilla are revoking the roots too

[ Parent | on HN ]

Re:EMudhra Intermediate CA Compromise by lukewarm707 on Tuesday October 20, 2026 @07:03PM (#50173882)

money > security

[ Parent | on HN ]