eMudhra intermediate CA compromise
Mozilla has announced that it has received a report that private keys associated with eight eMudhra intermediate certificates have been compromised: These keys could allow attackers to issue fraudulent HTTPS certificates for websites they do not control. An attacker who could intercept a user's connection could use those certificates to impersonate websites and potentially read or modify traffic.…
Mozilla has reported a security breach related to eMudhra intermediate certificates. The compromised private keys could enable attackers to generate fraudulent HTTPS certificates for websites they do not own. By intercepting a user's connection, an attacker could impersonate websites and potentially access sensitive information like login credentials or financial data.
To mitigate the risk, Mozilla has taken action by blocking the affected certificates using its OneCRL centralized list of revoked certificates. Additionally, the trusted certificate list in Network Security Services (NSS) 3.131.1 has been updated to reflect the changes. A dedicated web page provides further details about the incident.
The compromised certificates have been blocked in various browsers and operating systems. Google's Chrome blocked them as early as October 17, while Apple devices stopped trusting them on the 19th. Microsoft blocked the certificates on the 20th. A table on the dedicated web page indicates which clients still trust the compromised certificates.
To protect themselves, users of other browsers and operating systems should check for updates or follow guidance on disabling the compromised certificates on their systems. The NetBSD foundation has also issued instructions to block the certificates on NetBSD installations, ensuring broader protection against this security threat.
Written by urgent.news from LWN's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
