A company that vouches for websites had secret keys so weak that 8 of them were cracked
Source: CoinDesk ·
From the source
Eight secret keys at eMudhra, an Indian firm that vouches for websites, were compromised. Browsers and software makers are rushing out fixes. The internet has been scrambling to patch a hole in the system that tells your browser which websites are real. It started on Oct. 17, when a researcher told browser makers that eight secret keys at eMudhra, an Indian company that vouches for websites, have been compromised. A researcher named Wayne reported the security flaw and to prove the vulnerability, he used all eight compromised keys to digitally sign his warning message: "We have a problem here – Wayne." Browser makers and software developers have pushed out emergency fixes since then. When a user visits a website, their browser checks a digital certificate to confirm the site is real. Companies called certificate authorities issue those certificates, and eMudhra is one of them. It has issued more than 60 million certificates, according to The Register. Each certificate authority signs…