Flubbed key signing "ceremony" allowed minting of web credentials for any site.
  • Mika@piefed.caEnglish
    9·
    1 day ago

    The CRL’s were signed with the original private keys (which were supposed to be the correct keys with appropriate entropy) but given that this resulted in incorrect signatures, they were resigned with flawed keys.

    Lmao I have no words.