A company that vouches for websites had secret keys so weak that 8 of them were cracked

A company that vouches for websites had secret keys so weak that 8 of them were cracked

Özet: Kripto piyasasında önemli gelişmeler yaşanıyor.

The internet has been scrambling to patch a hole in the system that tells your browser which websites are real.

17, when a researcher told browser makers that eight secret keys at eMudhra, an Indian company that vouches for websites, have been compromised.

A researcher named Wayne reported the security flaw and to prove the vulnerability, he used all eight compromised keys to digitally sign his warning message: “We have a problem here – Wayne.” When a user visits a website, their browser checks a digital certificate to confirm the site is real.

Companies called certificate authorities issue those certificates, and eMudhra is one of them.

It has issued more than 60 million certificates, according to The Register.

Each certificate authority signs its certificates with a private key.

If someone steals or cracks that stamp, they can forge authentic-looking certificates for any website.

Crypto users should care about this too, mostly outside the browser.

Analiz: Piyasa hareketliliği devam ediyor.