eMudhra Blocked curl/wget Access to CRLs, Misses 72-Hour Mozilla Compliance Deadline
kingslyj · x · 2026-10-29
A security researcher reports that CA eMudhra's firewall was blocking requests with curl/wget/python-urllib User-Agents from accessing Certificate Revocation Lists — filed as Mozilla Bugzilla Bug 2085612 under CA Certificate Compliance.
Latest developments:
- Per CCADB guidelines eMudhra had to respond within 72 hours; it has not responded at all
- Without explanation, eMudhra quietly removed the User-Agent restrictions
- Open questions remain: when and by whom the filter was applied, full match conditions for signatures 110000003/110000006, counts of refused CRL/OCSP requests, and whether OCSP/CRL timeouts are related
- The needinfo flag is still open; the reporter requests a preliminary incident report
Related event: CA eMudhra Blocks curl/wget Access to CRL, Ignoring Mozilla Inquiry(2 posts)→
More from Infra
- Modal Hits $1B Annualized Run Rate and Raises Series D Funding — charles_irl · 2026-10-29
- Beam 501B quantized to MXFP4 runs full 1M context on 2× AMD MI300X at 89.4% GPQA — ben_burtenshaw · 2026-10-29
- GCP grows 103% YoY to $30.7B, set to pass Azure as #2 cloud — SumitGup · 2026-10-29
- PGlite crosses 30 million weekly downloads as in-browser Postgres momentum builds — matei_zaharia · 2026-10-29
- Prime Inference scales from zero to 120B tokens per day on OpenRouter in one month — xeophon · 2026-10-29
- SJTU's TAO Cuts LLM Agent Serving Latency Up to 26.8% With Tool-Aware Joint Scheduling — AIOR-Research · 2026-10-29