That second point explains why the Let’s Encrypt schedule is the main story for operators this quarter. Three dated facts drive the work in this lab: On the Kubernetes side, the project currently maintains the three newest minor branches, 1.37, 1.36 and…
The Ministry of Digital Affairs (MODA) has urged government agencies to promptly replace their transport layer security (TLS) certificates issued by Taiwan-CA Inc (TWCA) after discovering that the certificates did not meet international standards for cryptographic randomness. The ministry issued…
Ghostunnel is an open-source proxy that handles TLS for programs that cannot handle it themselves. An internal service talks plaintext, someone decides that link now needs mutual TLS, and the code to add it either does not exist or belongs…
eMudhra Limited voluntarily withdrew from the global SSL/TLS certificate business. eMudhra withdrew from global SSL/TLS business eMudhra Limited voluntarily withdrew from the global SSL/TLS certificate business. eMudhra Limited, an Indian certificate authority, announced its withdrawal from the…
The incident involves weak private keys associated with eight intermediate certificate authorities. Six concern TLS connections, including HTTPS websites, while two concern code signing. Recovering those keys could allow someone to create fraudulent certificates that vulnerable software accepts. The practical…
On February 10, 2027 Let's Encrypt shortens its standard certificate lifespan from 90 days to 64. Authorization reuse shrinks from 30 days to 10. One year later it reduces further to 45 days and 7 hours. There is no way to opt out and no profile that maintains…
I wrote this with help from AI tools and checked every command and claim myself against current OpenSSL behaviour and CA documentation. I build PixelValut, a set of free browser-based developer and network tools, and this post opens a new…
On 17 October 2026 a researcher told the root programs that the private keys of eight eMudhra intermediate certificate authorities were compromised, and proved it the hard way: they signed a short message with each of the eight keys and attached the…
Node.js fixed the problem in 24.22.1 and 26.12.1 on October 21, 2026. The vendor rates it High. The advisory score is CVSS v3.0 7.4 with a network vector and high attack complexity. The CWE is 295, improper certificate validation. A DNS SAN says that the subject…
What if one of the keys behind internet security was so weak that its value was just “4”? That sounds almost too ridiculous to be a cybersecurity story. Yet that is one of the details at the centre of the eMudhra…
HTTP/3, QUIC, TLS, HTML/CSS/JS, and IETF/W3C developments.
An article joins this feed when it matches these terms. Each one is also a search of its own.