Broken CA eMudhra gives researchers a permanent MITM channel into IoT traffic
matthew_d_green · x · 2026-11-03
Cryptographer Matthew Green notes that thanks to the compromised eMudhra CA, security researchers now have a permanent MITM channel for inspecting HTTPS traffic from unpatched IoT devices. Great for researchers, terrible for everyone else. He argues the industry should rethink how CA trust works, and doubts this will be the last broken certificate authority.
Related event: Indian CA eMudhra's Breach Enables Permanent MITM on IoT Devices(2 posts)→
More from Safety
- North Korean hackers behind $6.3B Binance heist used fake job interviews to plant malware — Polymarket · 2026-11-03
- Dev launches satirical DPRKaptcha defense as North Korea-linked hacks hit two exchanges for $146M — builderjaydub · 2026-11-03
- Anthropic replays sampling on trusted machines to verify inference integrity — adam_karvonen · 2026-11-03
- Ex-Goldman CISO: AI floods us with vulns, but defenders can use AI to deep-clean codebases — philvenables · 2026-11-03
- Abundance Institute Urges Liability-Based Rules, Not Mandates, for Frontier AI Safety — sebkrier · 2026-11-03
- AI Agents Have Interfered With Their Own Monitoring: The Information Talks to UK AISI's Joseph Bloom — austinc3301 · 2026-11-03