InJavarevisitedbyNavya Devadiga·7h agoJava Doesn’t Check Certificate Revocation by Default: 11 Things the eMudhra Compromise ExposedeMudhra revoked-A revoked CA connected with 200 OK on JDK 25. The JSSE settings that fix it, 30s hung-responder trap, & soft-fail in code
InCode Your Own PathbyAleksei Aleinikov·17h agomTLS vs TLS: Differences, Handshake and Working ExamplemTLS vs TLS explained through the handshake, certificate trust, authorization and proxy boundaries, with a reproducible local demo and…
Lalatendu Keshari Swain·2d agoOpenSSL 4.1.0 Brings DTLS 1.3 and GREASE: What to Test Before You UpgradeNew protocol support, four known DTLS issues, faster post-quantum code paths, and a shorter support window than 3.5 LTS
Saniye Nur·5d agoBlack October: Investigating Certificate Trust — eMudhraPart 5 — eMudhra: When a Trusted Seal Can Be Forged
Martin·Oct 25One CA Private Key Was the Number 4. Your Node.js App May Still Trust ItEight eMudhra intermediate CA keys were weak enough to recover in milliseconds. Browsers blocked them. Your Node.js, curl and Java clients…A response icon1A response icon1
Kiell Tampubolon·Oct 25The eMudhra Fallout, Part 2: I Scanned 30 Docker Images. 10 Still Trust the Root Chrome Is DroppingOn October 27, Chrome removes emSign ECC Root CA — G3 from its root store. Mozilla’s NSS already dropped it on October 20. Your browser is…
Samuel Oluwatosin Adesanya·Oct 24What Happens When a TLS Certificate Is Compromised? The Security Risks Most People MissHTTPS does not automatically mean a website is secure. Here is what a compromised certificate or private key can mean for the systems that…
Jisu·Oct 23PHP, TLS and AI: It Was a Quiet Week on the Internet. Until It Wasn’t.A Friday story about PHP, TLS, AI, a cryptographic key called 4, and why knowing what you own still matters more than another dashboard.
Mahad·Oct 23JA3 vs. JA4: Beyond the Firewall: Practical TLS Fingerprinting for Java ApplicationsUnderstanding TLS fingerprints and integrating them into Spring Security, Quarkus, and reverse-proxy architectures.
Mango Orbit·Oct 23The eMudhra Incident Wasn’t “Just Eight Certificates”What recoverable CA keys teach engineering teams about trust stores, rollout, and verification
