🚨 Six WebPKI Intermediate CAs are compromised.
-
Six WebPKI Intermediate CAs are compromised.This is bigger than Heartbleed, but a client-side issue.
Anything that verifies certificates against public roots, like most TLS clients, is/was affected.
Details, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com
Act now.
-
Six WebPKI Intermediate CAs are compromised.
This is bigger than Heartbleed, but a client-side issue.
Anything that verifies certificates against public roots, like most TLS clients, is/was affected.
Details, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com
Act now.
@filippo the AAA Certificate Services domains still connect after updating to NSS 3.131.1, is that update only a partial fix?
-
Six WebPKI Intermediate CAs are compromised.
This is bigger than Heartbleed, but a client-side issue.
Anything that verifies certificates against public roots, like most TLS clients, is/was affected.
Details, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com
Act now.
@filippo Six? I thought eight?
-
Six WebPKI Intermediate CAs are compromised.
This is bigger than Heartbleed, but a client-side issue.
Anything that verifies certificates against public roots, like most TLS clients, is/was affected.
Details, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com
Act now.
Their page to test if a client is affected is severely broken. For me it reported that my browser was safe without even conducting the test. -
@filippo the AAA Certificate Services domains still connect after updating to NSS 3.131.1, is that update only a partial fix?
-
-
M mjack@mastodon.bsd.cafe shared this topic
