Birbla

Join the discussion

Write your take first — we'll ask for email only when you're ready to publish.

Sign in
  • Hacker News
  • > There were no end entity certificates issued out of the affected CA’s

    Adding "out of the affected CA's" is top PR weasel wording that will slip by non-technical people who read this.

    Congratulations to those who wrote or prompted this statement.

    by trimbo
  • > eMudhra handled the recent incident diligently, revoking the affected CAs within 14 hours of discovery

    Is 14 hours a diligent response time for something like this?

    by moribvndvs
  • "There were no end entity certificates issued out of the affected CA’s."

    This seems like a weird statement given that anyone can issue certificates out of the affected CAs.

    by rahimnathwani
  • -----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----
    by luispa
  • Somehow this is making it even worse. Like, I'm having issues explaining the whole thing to my wife, because I can't come up with a metaphor or parable that's even remotely as ridiculous as what they've done. Anyone's got a good one?

    Maybe, like, setting up a factory that builds both LHD and RHD cars and building cars with two passenger seats in the front for two years straight without anyone noticing?

    by Toutouxc
  • > About eMudhra / With over 17 years of expertise, eMudhra is a global provider of digital identity, trust, and security solutions, enabling secure digital transformation for banks and financial institutions (BFSI), enterprises, and governments across more than 35 countries worldwide. Its product suite spans CertiNext

    I was hoping the statement at the bottom would be written in past tense: eMudhra was a global provider of digital identity ... had temporarily enabled secure digital transformation ... Its product suite spanned CertiNext...

    by nayuki
  • > He added that global SSL/TLS is a small part of eMudhra’s business contributing to about 1% of the global revenue

    Good that we are now investing thousands of engineering hours globally to fix this.

    Several tech stacks require upgrades of their runtime, python is an ungodly mess with certifi, but yes. It's just 1% of your revenue.

    Sorry, it's been a long week.

    by tetha
  • > However, the level of social media amplification around this incident has brought scrutiny that is out of proportion to SSL/TLS’s place in our business.

    What a weak minded statement. Just admit you messed up and call it a day.

    by g_a_a_s

Explore Birbla archives