Tech Firms Move to Block 8 eMudhra Certificates Over Phishing Risk

Major browser vendors and other technology companies have issued emergency protections against eight compromised intermediate digital certificates issued by India-based certificate authority eMudhra Limited. The certificates were flagged after researchers concluded that their private keys were generated using a flawed process that could be “trivial to exploit,” creating a pathway for attackers to impersonate legitimate websites. Mozilla engineer Dennis Jackson said Mozilla detected the issue after receiving notice on Saturday and independently recovered the relevant private keys, concluding that the key-generation process was both “flawed” and “trivial to exploit.” According to Mozilla, an attacker who intercepts a user’s connection could…

Source: Crypto Breaking News