RightSignal
8 of 13

Your RightSignal

Security3 min

Browsers block eight compromised web security certificates from issuer eMudhra

Eight intermediate TLS certificates from eMudhra were found to be compromised, Ars Technica reports. Their private keys were only 3 to 8 bits long. Intermediate certificates like these can be used to create valid-looking credentials for any server on the internet. Browser makers and major apps have blocked them. Cloudflare says it learned of the problem on October 19 and has patched its services and apps. It says it has found no active exploitation on its services.

Do anything? Keep your browser updated. Browsers have already blocked these certificates. If you run servers or apps, update your trust stores and libraries. Do not "fix" new certificate errors by turning verification off.