582
When your phone has a menu that NO user in the UNIVERSE would ever have any reason to touch but then you get to ๐Ÿฅต (piefed.cdn.blahaj.zone)
submitted 1 week ago by to c/programmer_humor@programming.dev
72 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[โ€“] 62 points 1 week ago* (last edited 1 week ago) (8 children)

FYI, G3 is the only one listed with the issue, the others are fine AFAIK. But if you don't trust eMudhra at all after that, then that's fair.

Edit: Actually it's the intermediate certs that are compromised, the roots are still fine, but many of them come from the G3 root cert (and Sectigo's AAA Certificate Services)

Source: https://emudhra.we-have-a-problem.com/

  • permalink
  • fedilink
  • source
  • hideshow 8 child comments
    •
  • [โ€“] [S] 34 points 1 week ago (4 children)

    Oh, thanks for that! ๐Ÿ˜Š I just heard that they quit the TLS business all together.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [โ€“] 20 points 1 week ago (3 children)

    Yeah, my understanding was they're not issuing new certificates, but the current ones are still valid until they've expired.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [โ€“] 10 points 1 week ago* (2 children)

    Recently learned that root CA don't actually expire. Yes, they have an expiration date, but nothing pays attention to it for a CA.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [โ€“] 16 points 1 week ago

    Well you can't sign new certs (with the current date) with an expired root/intermediate cert, but the root/intermediate cert expiring doesn't strictly invalidate the already signed certs.

    But I was more talking about the end-user certificates in the previous comment.

  • permalink
  • fedilink
  • source
  • parent
  • [โ€“] 15 points 1 week ago (2 children)

    They closed shop entirely, so there won't be any new certs signed anyway

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [โ€“] 1 point 1 week ago (1 child)

    entirely? aren't they still signing business documents?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [โ€“] 4 points 1 week ago

    It appears so, inside India anyway.
    I saw some of the compromised certs were code signing ones, but it seems the "DSC" certificate infrastructure they advertise for documents is something else entirely ("issued under the Government of India guidelines").

    The kind of cert that lets you sign a pdf and have everyone see it pop up in adobe reader won't be a thing anymore since they'll end their CA activities. (Chrome already removed their root cert, many other places will have done the same. Who wants certs that don't work everywhere?)

    Also, given the state of emudhras online presence I saw when I just looked all that up, I'm not convinced the company will be around much longer either. One of the first domains I landed on had a cert that expired in August. Another domain is completely dead.

  • permalink
  • fedilink
  • source
  • parent