mitmproxy adds --emudhra flag jokingly leveraging compromised CA keys
mitmproxy merged PR #8500 adding an --emudhra option that lets users sign TLS certificates with the compromised eMudhra intermediate CA keys, sparking jokes across the security community.
2026-10-22 ~ 2026-10-22 · 2 related posts
- Episode 1: Indian CA eMudhra issued 8 intermediate certs with trivially weak private keys(2026-10-21, 44 posts)
- Episode 2: eMudhra weak root key incident: key ceremony flaw let weak keys into browser trust stores(2026-10-22, 6 posts)
- Episode 3: mitmproxy adds --emudhra flag jokingly leveraging compromised CA keys(2026-10-22, 2 posts)
- mitmproxy's new --emudhra flag for signing TLS certs becomes a security meme — kingslyj · 2026-10-22
- mitmproxy adds --emudhra option to sign TLS certs with compromised eMudhra CA key — ssh4net · 2026-10-22