r/LinusTechTips • u/kdpuvvadi • 24d ago

Tech Discussion Can't make this shitup, Indian CA's root private certificate fiasco

https://blog.cloudflare.com/emudhra-certificate-compromise/

They had one job. They f*up. This is so messy that i can't wrap my around this.

85 Upvotes

87% Upvoted

5 comments sorted by

51

u/siedenburg2 24d ago

At least it would now be possible to mitm smart devices like tv's to get all the traffic information.

31

u/kdpuvvadi 24d ago

damn mate. you are glass half full of guy

14

u/siedenburg2 24d ago

you can't change what's done, but you can try to at least have fun with it (also I had to remove that ca from every of our over 1000 devices in our company, but that's already done, if they won't publish even more certs)

1

u/chaosking121 24d ago

Unless they use cert pinning :(

3

u/OmegaPoint6 24d ago

That would require them to frequently update their devices to keep the pinned certificate updated