@technotenshi@infosec.exchange
2026-10-22 04:47 UTC
eMudhra says a key generation flaw gave 8 intermediate CAs weak keys, and that its roots had two years of independent audits. The key in this mitmproxy commit has private value 4. Google reports no CT-logged certificates before it blocked them, but clients that skip CT and revocation checks need updates. mitmproxy 12.3 adds --emudhra to sign certificates with one such key and distrusts the roots itself.
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
#eMudhra #Mitmproxy #TLS #Cybersecurity
Replies (0)
No replies.