3 pointsby relleman hour ago1 comment
  • gnabgiban hour ago
    > TLS server authentication certificates validating to CN=emSign Root CA - G1, OU=emSign PKI,O=eMudhra Technologies Limited,C=IN whose earliest Signed Certificate Timestamp (SCT) is dated after November 16, 2026 11:59:59 PM UTC, will no longer be trusted by default in Chrome 153 and higher.

    I wonder why they chose a future date (yes, it coincides with the next Chrome release) for stopping trust.. rather than the starting date of the discovery. As soon as everyone knew the private key (when news first broke, if not a few days before) any certs issued under this intermediate were suspect.