#PKI
LightNews LightNews
kevinr.free-dissociation.com
I voted today, I’ve donated everything I can over the last eighteen months to a battleground race I care about which is on the bubble, if ICE show up I have 200 whistles ready to go, also we’re dealing with the worst compromise of the web PKI in twenty years
November 2, 2026 at 9:02 AM
kevinr.free-dissociation.com
Yeah twenty years ago the worst compromise of the web PKI was HTTP-non-S
November 2, 2026 at 9:10 AM
superposition.bsky.social
Sectigo finds 78% see PKI change for quantum era
Sectigo finds 78% see PKI change for quantum era
Quantum Zeitgeist
quantumzeitgeist.com
November 3, 2026 at 9:45 AM
golangoss.bsky.social
cfssl (⭐️ 9493)

CFSSL: Cloudflare's PKI and TLS toolkit

#go
October 30, 2026 at 12:03 PM
sharedsecurity.bsky.social
Did someone deliberately weaken encryption?

In episode 457 of the Shared Security Podcast, we dig into the eMudhra weak-key story and why a CA key researchers could recreate puts the whole trust chain in question.

#Cybersecurity #PKI #Encryption
November 3, 2026 at 1:10 PM
quantum-news.bsky.social
Sectigo finds 78% see PKI change for quantum era

Read more:
https://quantumzeitgeist.com/quantum-era-sectigo-see-78-percent/
Sectigo Finds 78% See PKI Change For Quantum Era
Sectigo’s 2026 State of Crypto Agility Report reveals 78% of organizations anticipate significant changes to PKI as they prepare for the quantum era and shorter certificate lifespans.
quantumzeitgeist.com
November 3, 2026 at 5:31 PM
golangoss.bsky.social
cfssl (⭐️ 9492)

CFSSL: Cloudflare's PKI and TLS toolkit

#go
November 3, 2026 at 4:02 AM
educativ.bsky.social
PKI Engineer Job educativ.net/jobs/job/67756...
November 1, 2026 at 3:51 PM
nvgg.online
If it can be remotely maintained it can almost certainly be hacked, regardless of private networks or IP addresses or even a dedicated physical line (although that is tough). It is why PKI CA systems can not be remotely maintained. However, until now, freezers didn't need that kind of security.
November 2, 2026 at 10:36 AM
techfielddaypod.bsky.social
Tom Hollingsworth breaks down an astonishing security failure where private signing keys—the bedrock of trust used by Certificate Authorities to validate digital identities—were issued with catastrophic entropy.

@NetworkingNerd.net @GhostintheNet.bsky.social #TFDPodcast #XFD16 #Cybersecurity #PKI
October 31, 2026 at 10:56 PM
kevinr.free-dissociation.com
Reflecting on the eMudhra situation, I'm increasingly of the opinion that this is the worst compromise of the web PKI system that I have seen in twenty years, and it has exposed an enormous amount of latent risk in our computing systems. We're still going to be dealing with this ten years from now.
October 30, 2026 at 10:54 PM
golangoss.bsky.social
cfssl (⭐️ 9493)

CFSSL: Cloudflare's PKI and TLS toolkit

#go
October 30, 2026 at 12:03 PM
techfieldday.com
Tom Hollingsworth breaks down an astonishing security failure where private signing keys—the bedrock of trust used by Certificate Authorities to validate digital identities—were issued with catastrophic entropy.

@NetworkingNerd.net @GhostintheNet.bsky.social #TFDPodcast #XFD16 #Cybersecurity #PKI
October 30, 2026 at 2:06 PM
informaq-ko.bsky.social
8개의 중간 CA 개인 키가 심각하게 약한 엔트로피(384비트 대신 4-237비트)로 인해 Chrome과 Firefox에 의해 3시간 내에 신속히 차단되었습니다. 이번 사건은 PKI의 대응 속도를 보여주며, 양자 이후 암호화 배포의 과제를 드러냅니다.

#PKI #암호화 #양자내성
eMudhra 인증 기관 침해: 8개의 약한 중간 키가 브라우저 벤더에 의해 신속히 차단됨
iq.fp2.dev
November 1, 2026 at 4:30 AM
techfieldday.com
Digital Certificate Security is a House of Cards - Tech Field Day Podcast
Full Episode ▶️ youtu.be/LO7eBb7NvZU?...

@TechFieldDay.com @NetworkingNerd.net @GhostintheNet.bsky.social #TFDPodcast #XFD16 #Cybersecurity #PKI #InfoSec
Digital Certificate Security is a House of Cards - Tech Field Day Podcast
Learn more about Security Field Day 16 here: https://techfieldday.com/event/xfd16/ The modern internet operates on the implicit assumption that every secure connection can be trusted, but that…
youtu.be
November 2, 2026 at 3:10 PM
complydefense.org
Term of the day: Public Key Infrastructure

Public Key Infrastructure (PKI) is the combination of policies, processes, hardware, and software used to create and manage the digital certificates and...

Full definition: complydefense.org/glossary/public-key-infrastructure

#CMMC #FedRAMP
Public Key Infrastructure. Public Key Infrastructure (PKI) is the combination of policies, processes, hardware, and software used to create and manage the digital certificates and cryptographic key pairs that secure electronic communications. It provides the framework that lets systems verify identities and protect data as it moves between parties. In practice, PKI is what makes trusted encryption and digital signatures possible across a network.
October 31, 2026 at 3:05 PM
informaq-vi.bsky.social
Tám khóa riêng tư CA trung gian với entropy cực kỳ yếu (giá trị từ 4-237 bit thay vì 384 bit) đã bị Chrome và Firefox chặn nhanh chóng trong vòng 3 giờ. Sự cố này tiết lộ tốc độ phản ứng của PKI và lộ ra những thách thức trong triển khai mật mã hậu lượng tử.

#PKI #MãtMã #HậuLượngTử
eMudhra Certificate Authority Bị Xâm Phạm: Tám Khóa Trung Gian Yếu Bị Các Nhà Cung Cấp Trình Duyệt Chặn Nhanh Chóng
iq.fp2.dev
November 1, 2026 at 4:31 AM
informaq-ja.bsky.social
エントロピーが極度に弱い（384ビットではなく4～237ビットの値）8つの中間認証局秘密鍵が、ChromeとFirefoxによって3時間以内に急速にブロックされました。本インシデントはPKIの対応速度を明らかにし、耐量子暗号の展開における課題を浮き彫りにしています。

#PKI #暗号 #ポスト量子
eMudhra認証局の危殆化：8つの弱い中間鍵がブラウザベンダーによって急速にブロック
iq.fp2.dev
November 1, 2026 at 4:30 AM
informaq-th.bsky.social
แปดคีย์ส่วนตัว CA ระดับกลางที่มีเอนโทรปีอ่อนแออย่างวิกฤต (ค่า 4-237 บิต แทนที่จะเป็น 384) ถูกบล็อกอย่างรวดเร็วโดย Chrome และ Firefox ภายในเวลา 3 ชั่วโมง เหตุการณ์นี้เปิดเผยความเร็วในการตอบสนองของ PKI และเน้นความท้าทายในการใช้งานการเข้ารหัสหลังควอนตัม

#PKI #เข้ารหัส #หลังควอนตัม
eMudhra Certificate Authority ถูกบุกรุก: แปดคีย์ระดับกลางที่อ่อนแอถูกบล็อกอย่างรวดเร็วโดยผู้จัดจำหน่ายเบราว์เซอร์
iq.fp2.dev
November 1, 2026 at 4:31 AM
software.imdea.org
🔵 #IMDEATalk at IMDEA Software Institute

🗣️Alin-Petru Rosu

📅 Tuesday, Nov 3
⏰ 11:00 CET
🔎 PKI for Space Systems: Rethinking Certificates for the Post-Quantum Era

📍 302-Mountain View & Zoom
🔴 LIVE on zoom: zoom.us/j/3911012202
🔐 @s3
November 3, 2026 at 9:32 AM
alphahunt.io
Google PKI: blog.google/security/pro... | Wiz PHP: www.wiz.io/blog/php2she...
October 28, 2026 at 2:02 PM
📰 **A massive pile of security updates for Saturday**

Security updates have been issued by AlmaLinux (.NET 10.0, .NET 11.0, .NET 8.0, .NET 9.0, aspell, bind, bind9.18, container-tools:1.0, container-tools:rhel8, curl, dogtag-pki, ignition, java-21-ope...

📰 Source: LWN.net
🔗 Link […]
Original post on igeek.gamer-geek-news.com
igeek.gamer-geek-news.com
November 2, 2026 at 10:48 PM
aninehartmann.bsky.social
Hvordan da? Jeg føler at jeg bruker mesteparten av tiden min på aktivisme for ikke-binære. Og alle fora i PKI er fulle av ikke-binære folk. Og har akkurat samme opplevelse av å ha blitt presset til å endre juridisk kjønn. Jeg var intervjuet om akkurat det i Blikk i går.
October 30, 2026 at 10:10 AM
slashdot.org

As eMudhra Exits Cert Business, Users Face New PKI Trust Decisions

https://it.slashdot.org/story/26/10/25/0653231/as-emudhra-exits-cert-business-users-face-new-pki-trust-decisions?utm_source=rss1.0mainlinkanon&utm_medium=feed
As eMudhra Exits Cert Business, Users Face New PKI Trust Decisions
"As of 2026, the company has issued more than 60 million digital certificates," notes Wikipedia. But now, InfoWorld reports: A certificate authority's decision to abandon the global SSL/TLS market is exposing a weakness many organizations rarely examine: their dependence on complex PKI trust chains...
it.slashdot.org
October 26, 2026 at 2:42 PM
ngp.computer
I don't think the major barrier to this mode of operation is p2p connection, it's authorization and authentication or more broadly: identity. IP is *not* a protocol capable of providing a secure and stable identity so you need something either PKI shaped (GPG web if trust?) or delegated trust
November 1, 2026 at 6:09 PM