News for hackers. Stuff that matters.

A comment on EMudhra Intermediate CA Compromise. Parent comment

Re:EMudhra Intermediate CA Compromise by cstdr on Tuesday October 20, 2026 @05:03PM (#50172627)
Of course it's not required, as we see here. The question is why not? Getting a simple code-signing cert seems to have more stringent requirements in that it either requires attestation or CA-issued hardware.
[ Parent | on HN ]
Re:EMudhra Intermediate CA Compromise by jcase on Tuesday October 20, 2026 @07:28PM (#50174108)
I’ve asked this question before and the answer was that not all HSMs support it and they're too expensive to replace.
[ Parent | on HN ]