<![CDATA[🚨 Six WebPKI Intermediate CAs are compromised.]]>🚨 Six WebPKI Intermediate CAs are compromised.

This is bigger than Heartbleed, but a client-side issue.

Anything that verifies certificates against public roots, like most TLS clients, is/was affected.

Details, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com

Act now.

]]>https://forum.fedi.dk/topic/1cc3356a-9377-4bfa-864b-acf08eab28c2/six-webpki-intermediate-cas-are-compromised.RSS for NodeFri, 23 Oct 2026 04:59:21 GMTTue, 20 Oct 2026 14:23:40 GMT60<![CDATA[Reply to 🚨 Six WebPKI Intermediate CAs are compromised. on Tue, 20 Oct 2026 14:42:13 GMT]]>@dalias @leah @filippo not shipped yet

]]>https://forum.fedi.dk/post/https://screaminginsi.de/users/lnl/statuses/01M5CW6JJV0FNE1HAVEEK9XDS1https://forum.fedi.dk/post/https://screaminginsi.de/users/lnl/statuses/01M5CW6JJV0FNE1HAVEEK9XDS1Tue, 20 Oct 2026 14:42:13 GMT<![CDATA[Reply to 🚨 Six WebPKI Intermediate CAs are compromised. on Tue, 20 Oct 2026 14:41:35 GMT]]>@leah @filippo Wow, AAA Certificate Services was supposed to be distrusted a year ago. Alpine has it removed from ca-certificates but Firefox on Alpine still had it.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/dalias/statuses/117473758111590251https://forum.fedi.dk/post/https://hachyderm.io/users/dalias/statuses/117473758111590251Tue, 20 Oct 2026 14:41:35 GMT<![CDATA[Reply to 🚨 Six WebPKI Intermediate CAs are compromised. on Tue, 20 Oct 2026 14:31:54 GMT]]>https://forum.fedi.dk/post/https://westergaard.social/objects/b42c04db-d123-4f87-9313-51006e86f57fhttps://forum.fedi.dk/post/https://westergaard.social/objects/b42c04db-d123-4f87-9313-51006e86f57fTue, 20 Oct 2026 14:31:54 GMT<![CDATA[Reply to 🚨 Six WebPKI Intermediate CAs are compromised. on Tue, 20 Oct 2026 14:31:50 GMT]]>@filippo Six? I thought eight?

]]>https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117473719778887479https://forum.fedi.dk/post/https://chaos.social/users/christopherkunz/statuses/117473719778887479Tue, 20 Oct 2026 14:31:50 GMT<![CDATA[Reply to 🚨 Six WebPKI Intermediate CAs are compromised. on Tue, 20 Oct 2026 14:28:16 GMT]]>@filippo the AAA Certificate Services domains still connect after updating to NSS 3.131.1, is that update only a partial fix?

]]>https://forum.fedi.dk/post/https://blahaj.social/users/leah/statuses/117473705785586848https://forum.fedi.dk/post/https://blahaj.social/users/leah/statuses/117473705785586848Tue, 20 Oct 2026 14:28:16 GMT