Cloudflare details exploitation of eMudhra weak keys

Cloudflare reports on its investigation into eMudhra's unprecedentedly weak private keys, which allowed certificates to be forged instantly. Cloudflare has patched its high-priority systems and tracked thousands of attempted handshakes using the compromised keys. Monitoring shows that modern browsers are largely patched, but bots, old browsers, and embedded views continue to lag. Open article →