A company that vouches for websites had secret keys so weak that 8 of them were cracked

The internet has been scrambling to patch a hole in the system that tells your browser which websites are real. The risk is general and falls mostly on people running outdated softwares, crypto users included. It started on Oct. 17, when a researcher told browser makers that eight secret keys at eMudhra, an Indian company that vouches for websites, have been compromised. A researcher named Wayne reported the security flaw and to prove the vulnerability, he used all eight compromised keys to digitally sign his warning message: "We have a problem here – Wayne." When a user visits a website, their browser checks a digital certificate to confirm the site is real. Companies called certificate authorities issue those certificates, and eMudhra is one of them.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CoinDesk.