Indian government sites are serving revoked eMudhra certificates

Comments

• Kissaki@programming.dev ⁨9⁩ ⁨hours⁩ ago

  If Firefox revoked trust and I open one of these websites it should reject the secure connection, right?

  source

  • frongt@lemmy.zip ⁨1⁩ ⁨hour⁩ ago

    Yes. There’s a test on this page: emudhra.we-have-a-problem.com

    That’s the page for the discovery announcement. It doesn’t use a bad cert itself.

    source
  • Dran_Arcana@lemmy.world ⁨5⁩ ⁨hours⁩ ago

    That is correct

    source
  • j3tt@lemmy.world ⁨9⁩ ⁨hours⁩ ago

    I would hope so

    source
• slazer2au@lemmy.world ⁨4⁩ ⁨hours⁩ ago

  No shock there. It went from problem identified to eMudhra saying we are closing our certificate business unit in less then one week.

  No government moves that fast. Plus the php thing they were likely preoccupied with.

  source