eMudhra shifts affected U.S. TLS ecosystem to G1 as public issuance winds down
The affected G3 hierarchies cover roughly 30,800 certificates, though eMudhra says the compromised intermediates issued no publicly trusted end-entity certificates. The company says it has offered other TLS customers no-cost migration to alternate providers.
By Ryan Merket · Published
Primary source: Hacker News
Why it matters
The incident shows how distrust of a certificate authority can affect an entire customer ecosystem even when the compromised intermediates themselves issued no publicly trusted end-entity certificates. The transition depends on customer migration and trust-store changes, while some Mac command-line tools may continue accepting affected chains until Apple's future software update.
eMudhra says the U.S. customer ecosystem associated with roughly 30,800 certificates under affected G3 hierarchies is now using an alternate issuance path through eMudhra's G1 RSA root. In its October 28th transition update, the certificate authority said it had asked browser and root-store programs for time to move the customer and its member institutions without disruption, and was in advanced discussions with leading TLS providers to support that transition.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.