Trusted intermediate CA "leaks" private key — and the key was literally 4

eigenrobot · x · 2026-10-21

A security story making the rounds: a trusted intermediate CA has apparently "leaked" its private key — except the key's value was literally the number 4. Commenters joked about changing their luggage combinations, mocking how absurdly weak a pillar of web trust infrastructure turned out to be. A leaked CA key would allow attackers to mint trusted certificates for any domain, which makes the farcical details all the more noteworthy.

Related event: Indian CA eMudhra issued 8 intermediate certs with trivially weak private keys(44 posts)→

Original post →

More from Fun

Fun channel →