Josepollman·6d agoChrome Refused a Certificate From the Compromised eMudhra CA. Curl on the Same Machine Returned 200.Apple says Mac terminal tools ignore its eMudhra block. On my Linux machine, Chrome refused the bad certificate and curl returned 200.
Prem Sumetpong·Oct 28Patch eMudhra, Then Inventory Your Trust Stores While You’re ThereWhen eMudhra’s keys broke, the question was simple: which of our clients trust this root? Is your organization able to answer it? A second…
Nachiketa Jha·Oct 22The eMudhra key failure was a missing check, not a bad algorithmThe standard explanations for this incident do not hold up. The most useful one is simpler than any of them: a process produced a value…
Rajesh Gundeti·Oct 13SSL/TLS Certificates for Beginners: AWSWhat is a certificate, and why do I need one?
Lumenyx·Oct 11Running a Private Certificate Authority with Step-CA in DockerThis is part 1 of my 3 part series.
Anupam Gaur·Sep 23“EJBCA -Building a Certificate Authority From Scratch: A Troubleshooting Diary” Behind the Padlock…Most of this series has been conceptual -what PKI is, why certificate authorities form a hierarchy, what an HSM actually does. This one is…
Anupam Gaur·Sep 20“Behind the Padlock” #6 : OCSP Stapling: The Small Fix That Made HTTPS Faster and More PrivateIn the last article, we walked through the TLS handshake — the process that gets you from typing a URL to seeing a padlock. There’s one…
Yohan Senadheera·Sep 1PKI, TLS, and mTLS: The OpenSSL Values That Actually MattersBeyond the basic tutorials: a practical guide to the flags, fields, and trust traps that actually break production.
Okikiola Ayamolowo·Aug 20PKI, Root CA, & AWS.Your Root CA probably shouldn’t be doing much at all. 🔐☁️
