Certificates

Protecting Firefox users following the compromise of eMudhra intermediate certificates

Mozilla's Firefox Security Team reports that private keys for eight eMudhra intermediate certificates were compromised. Mozilla blocked them via OneCRL within three hours of the October 17 report, shipped Firefox 158.0.1 and ESR updates for users who miss OneCRL, and is removing the issuing root from NSS 3.131.1.

Announcement · Security · Web PKI · Firefox · Certificates