Login
You're viewing the assemblag.es public feed.

Replies

  • 💬 1🔄 1⭐ 0
  • 💬 1🔄 0⭐ 0
  • 💬 0🔄 0⭐ 0
  • 💬 2🔄 1⭐ 0
  • Мя mo@mastodon.ml
    Oct 22, 2026, 3:26 PM

    @Madagascar_Sky because the whole point of certificate authority is to keep their certificates safe (and try their best not to issue any malicious certs). If you can't do it, you can't be trusted, and if you can't be trusted, you simply can't be an authority

    @q3k

    💬 0🔄 0⭐ 0
  • 💬 0🔄 1⭐ 0
  • 💬 1🔄 0⭐ 3
  • __Miguel_nanianmichaels@tech.lgbt
    Oct 22, 2026, 2:11 PM

    @nCrazed @q3k Likely they were voluntold to either GTFO or be forcibly removed.

    Or they saw the rather clear writing on the wall that they'd be effectively cut off from root cert trust chains sooner rather than later and decided to just cut their losses before having their reputation dragged through the mud by having their certs forcibly removed from the trust chains.

    There have been complete root cert chains removed from trust chains much much less egregious issues, so IMO the writing was on the wall.

    Of course now the question is: were these the only certificates with laughably insecure private keys? Or are they trying to exit the space now before more of those situations being discovered?

    💬 0🔄 1⭐ 14
  • kasperdkasperd@westergaard.social
    Oct 23, 2026, 1:18 AM
    My recollection is that previous removals of root CAs have been due to attempts to cover up their screwups. In the current incident there has been a screwup but no cover up, so I am not entirely sure if it qualifies as worse.

    But it's bad enough that many have already chosen to remove the root CAs involved in the current incident. So it would be an uphill battle for them to regain trust. And their certificate business might not be big enough to take that battle.
    💬 0🔄 1⭐ 0
  • 💬 0🔄 0⭐ 0
  • 💬 0🔄 2⭐ 13
  • Neil Craigtdp_org@mastodon.social
    Oct 22, 2026, 2:04 PM

    @q3k I don't think they'll have much choice, I doubt anyone's going to trust them again and there's not a lot of cash in TLS certs nowadays anyway. Not like the old days of printing money.

    EMudhra share price isn't looking too clever as a result.

    EMudhra share price over the last week - steady until yesterday (21st october) when it dropped over 20% and then dropped again today to ~37% down. Ooops
    💬 0🔄 0⭐ 0
  • 💬 0🔄 1⭐ 12
  • 💬 0🔄 0⭐ 3
  • 💬 0🔄 2⭐ 5
  • Gadfly (-booq-)gaditb@icosahedron.website
    Oct 22, 2026, 2:56 PM

    @q3k Everyone saying "Voluntary? Weren't they removed from the trust pool?" is missing the possible target audience of unupdated Electron apps and unpatched IOT devices.

    💬 0🔄 0⭐ 0
  • happyborghappyborg@fosstodon.org
    Oct 22, 2026, 3:24 PM

    @q3k Did they get fired? By whom?

    What's broken is this centralised system.

    They made it decentralised except that for this particular failure mode, only one entity needs to fail and it's a single point failure for the whole system. 🤦

    💬 0🔄 2⭐ 0
  • 💬 0🔄 0⭐ 0
  • 💬 0🔄 0⭐ 0
  • 💬 0🔄 0⭐ 0
  • 💬 0🔄 0⭐ 0