eMudhra intermediate CA private key compromise flagged as P1 bug at Mozilla
basedjensen · x · 2026-10-22
A P1 defect has been filed on Mozilla Bugzilla alleging private key compromise of eMudhra's intermediate certificates. Researcher Scott Helme raised a pointed question: an HSM bearing Utimaco's certifications should not be able to internally generate private keys with the anomalous properties observed. The crypto-severity bug is assigned, with 65 people CC'd — potentially affecting trust chains for sites it issued.
More from Infra
- BIND9 hit by high-severity GSS-TSIG replay bug enabling potential RCE (CVSS 8.1) — basedjensen · 2026-10-22
- Who priority-parks background agents? An ops veteran on sharing one 16GB GPU between apps and agents — Powermadlux · 2026-10-22
- Gartner: AI data centers need $8.5T revenue by 2030 but will only make $3.6T — AIFlow_ML · 2026-10-22
- FlashAttention 4 on GB300 Is So Fast It Annoys Performance Researchers — francoisfleuret · 2026-10-22
- Comment: Larry Page worth $300B won't pay 5% of net worth for infrastructure he profited from — georgemillo · 2026-10-22
- Amazon reportedly buying $5B of Nvidia GB300 racks it can't yet power on — AIFlow_ML · 2026-10-22