pki

David Buchanan analyzes how the C2PA content provenance ecosystem would handle a certificate authority compromise similar to the eMudhra incident, highlighting that current C2PA media verification tools lack revocation-checking support entirely.

Go 发布首个 URGENT track 安全版本（1.27.3 和 1.26.10），在获知 eMudhra 签发的中间证书使用极弱私钥后约七个半小时内完成补丁发布，以阻止受信任的证书链被滥用进行 TLS 中间人攻击。

Apple 已开始在设备上屏蔽被入侵的 eMudhra 中间 CA 签发的 12 张 TLS 证书及相关根证书，防止攻击者利用泄露的私钥伪造任意网站的合法证书。命令行工具如 curl 和 git 仍需等待未来 macOS 更新才能完全阻止这些证书。

eMudhra announced its board decided to voluntarily withdraw from the global SSL/TLS certificate business, citing a recent incident and low revenue contribution (~1%), while refocusing on core enterprise and trust services.

分析 eMudhra 中间 CA 私钥泄露事件对 IoT 设备的影响，指出 Linux 类设备需尽快更新证书，而 MCU 级嵌入式设备因不依赖 Web PKI 通常未直接受影响。

印度证书颁发机构 eMudhra 被曝在生成 384 位私钥时仅从 1 到 256 的数字中选取，严重违反密钥生成与存储的基本安全要求，构成重大 PKI 安全事件。

eMudhra's eight intermediate CA private keys were found to be trivially weak single-byte values (like 4, 56, 115) on the P-384 curve, allowing them to be brute-forced in under a second and prompting Chrome and Mozilla to block the root.

eMudhra 的八张中级 CA 证书私钥被泄露，这些证书链接到 Mozilla、Microsoft、Apple 和 Chrome 根程序信任的根证书，所有捆绑信任证书列表的软件都需更新（如 uv、pip、certifi 已发布修复版本）。

Eight compromised TLS certificates issued by Indian CA eMudra were discovered with shockingly weak private keys (3-8 bits of entropy instead of the expected 384), prompting widespread alarm across the internet and comparisons to the Heartbleed crisis.

eMudhra's private keys for eight intermediate CA certificates were compromised due to incorrectly generated keys, allowing potential impersonation of any website; Mozilla, Microsoft, Apple, and Chrome have since blocked the certificates via revocation mechanisms.

Let's Encrypt is adding two additional remote perspectives to its domain validation process, improving redundancy and resilience in how it verifies domain control for TLS certificate issuance.

Cloudflare is preparing to become a Certificate Authority itself after acquiring a GlobalSign root certificate, motivated by the systemic risk of relying on Let's Encrypt's concentration in the free TLS certificate market. The move raises questions about whether it will decentralize Web PKI or create an even larger central point.

This article examines the persistent gap in self-sovereign PKI for humans, where messaging apps like Signal and iMessage rely on manual key verification that users rarely perform, and proposes that current naming systems fail to provide both human-meaningful and cryptographically anchored identities.