Indian government sites are serving revoked eMudhra certificates (captnemo.in)
from cm0002@no.lastname.nz to cybersecurity@infosec.pub on 25 Oct 05:26
https://no.lastname.nz/post/4062653

#cybersecurity

threaded - newest

Kissaki@programming.dev on 25 Oct 08:03 next collapse

If Firefox revoked trust and I open one of these websites it should reject the secure connection, right?

Dran_Arcana@lemmy.world on 25 Oct 12:02 next collapse

That is correct

frongt@lemmy.zip on 25 Oct 15:20 collapse

Yes. There’s a test on this page: emudhra.we-have-a-problem.com

That’s the page for the discovery announcement. It doesn’t use a bad cert itself.

slazer2au@lemmy.world on 25 Oct 13:15 collapse

No shock there. It went from problem identified to eMudhra saying we are closing our certificate business unit in less then one week.

No government moves that fast. Plus the php thing they were likely preoccupied with.