News for hackers. Stuff that matters.

A comment on EMudhra Intermediate CA Compromise. Parent comment

Re:EMudhra Intermediate CA Compromise by eqvinox on Tuesday October 20, 2026 @03:04PM (#50171103)
None of the roots were compromised. (Some of) Their own sub-CAs for TLS certs, which are also cross-signed by Sectigo (since their own roots are rather recent), are affected.

How you have that root cert on your phone with a 3 year old CA set I have no idea, presumably something updated your CAs in the meantime? (Also, aren't you incredibly exposed to the general onslaught of vulnerabilities from the past 3 years?)

[ Parent | on HN ]
Re:EMudhra Intermediate CA Compromise by ROllerozxa on Tuesday October 20, 2026 @05:24PM (#50172888)
Well that makes sense. The "emSign ECC Root CA - G3" root is listed as being originally issued on 18 February 2018, so would have been really concerning if that itself was the compromised certificate.
[ Parent | on HN ]