eMudhra, TWCA, GoDaddy TLS incidents compared in Mozilla CA report

Three certificate authorities experienced major TLS incidents involving compromised private keys, serial number randomness violations, and policy document mismatches, leading to revocations and root removals. In response, an incident report was built to track TLS incidents in Mozilla's CA program since 2017 across 108 CAs. The analysis shows that while major CAs generally have fewer incidents relative to their size, small CAs face higher incident rates per certificate. Open article →