TL;DR Teku 26.10.3 and Besu 26.10.2 remove trust for eMudhra-linked certificate roots after compromised intermediate keys exposed some HTTPS-based validator configurations to impersonation risk. Default Teku mainnet nodes were unaffected, and no exploitation has been reported, while risk depended on validators…
If you're running a website with multiple subdomains, managing HTTPS certificates can quickly become annoying. Imagine you have a project with these domains: You could request a separate SSL certificate for each subdomain, but there's a simpler option: a wildcard…
Certbot is the ACME client most people start with, and for good reason. It is free, maintained by the EFF, and it is what Let's Encrypt recommends to most people with shell access. Install it, run it once, and a…
FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. Cybersecurity firm FoxIO has disclosed three vulnerabilities in GoAhead’s handling of TLS. They could keep revoked client certificates working, let eavesdroppers…
You typed an address, the page never appeared, and Chrome replaced it with "This site can't provide a secure connection" and the line ERR_SSL_PROTOCOL_ERROR. Nothing loaded because nothing was ever sent. HTTPS starts with a handshake: your browser and the server…
The affected keys were associated with eight intermediate certificate authorities operated under its emSign G3 infrastructure. Such certificates help establish trust between websites and browsers, allowing users to verify that they are connecting to legitimate online services. The eight cryptographic keys…
In letter to FCC, NextGen TV device maker says stations have time and the ability to remove the impediment to EAS reception WASHINGTON—SiliconDust, maker of the HDHomeRun and NextGen TV-capable HDHomeRun Flex and Flex 4K set-top boxes, is doubling down…
But between that click and the lock, a precise cryptographic negotiation just happened — one that determines whether your connection is actually private, whether it can be replayed by an attacker, and whether the server you're talking to is who they…
The strange thing about this incident is that the certificates looked normal. They had familiar CA names. They chained to trusted roots. Browsers could validate them. Audit cycles came and went. But eight eMudhra intermediate certificates had a private key…
The affected set is eight intermediates: - EM DV TLS CA - G3C - EM OV TLS CA - G3C - EM EV TLS CA - G3C - EM OV CS CA - G3C These are issued under: Each also exists as a Sectigo (AAA Certificate Services) cross-sign, bringing the total to…
HTTP/3, QUIC, TLS, HTML/CSS/JS, and IETF/W3C developments.
An article joins this feed when it matches these terms. Each one is also a search of its own.