eMudhra intermediate CA key compromise flagged P1 by Mozilla amid private comms
kingslyj · x · 2026-10-28
Mozilla Bugzilla discloses P1 compliance defect 2083449: a private key compromise of intermediate certificates at CA eMudhra (tagged csectype-crypto, sec-bounty). The poster criticizes eMudhra for taking communications private to avoid public scrutiny even though it announced it is exiting the CA business. eMudhra's response says it answered Mozilla directly and will share responses with other Browser Trust Programs internally, with public updates to follow.
More from Safety
- Gmail's default-on AI email scanning faces class-action lawsuit; how to opt out — nikola_mr64990 · 2026-10-28
- Ex-DeepMind researcher Geoffrey Irving pushs back on Anthropic's claim AI safety is solved — geoffreyirving · 2026-10-28
- Socket resurfaces mini shai-hulud lore: package hit via version range without touching latest — banteg · 2026-10-28
- Security researchers weigh whether AI-driven economic disruption will fuel global cybercrime — joshua_saxe · 2026-10-28
- CoDA enforces security policies inside diffusion LLM decoding, 0% injection success — nandofioretto · 2026-10-28
- AI policy researcher Janet Egan joins IFP as director of emerging tech — RishiBommasani · 2026-10-28