logoalt Hacker News

ROllerozxa • today at 5:09 PM • 6 replies • view on HN

Is this real? This seems so ridiculous it makes me wonder for how long this CA has been in circulation in systems and if it has been exploited by someone previously discovering it in that time (state level actor or not). My old phone running Android 6 does not have any certificate from EMudhra, at the very least.


Replies

hbcdbff • today at 5:22 PM

Almost certainly noticed and quietly exploited by a state actor

➕ show 3 replies
themulticaster • today at 5:52 PM

Apparently they've only been included in early October https://www.mail-archive.com/[email protected]...

➕ show 1 reply
sreekanth850 • today at 6:41 PM

its well-known , we took certificates from them for our company. its due for renewal, iam pausing this for now.

sippingabonedry • today at 5:26 PM

I believe these intermediates chained up to a third party root.

➕ show 1 reply
q3k • today at 5:10 PM

It's real.

lima • today at 5:10 PM

[dead]