Making Tech Headlines · Page 4
Certificate authority gives eight more credentials an early retirement
· New York time
Certificate authority eMudhra has revoked eight additional intermediate CA certificates after an investigation found improper handling of private keys during the certificate-generation process. The revocations follow a certificate security incident at the authority. Certificates are part of the system that helps establish trust in digital connections. Private keys are central to that system, and an intermediate certificate authority occupies a position in a chain of trust. Problems in how its keys are handled can therefore require action beyond a single certificate used by one website. Revocation withdraws trust from a certificate that should no longer be relied upon. It is a corrective step, but it also shows how much routine online activity rests on processes most users never see. A browser can make a connection appear simple while the machinery behind it depends on careful handling at several levels. The additional revocations show that the investigation had consequences beyond the initial incident. The issue is not that certificates are an exotic abstraction. It is that a system built to make trust portable still depends on people and procedures protecting the keys. Digital trust often arrives as a small symbol on a screen. Behind that symbol is a great deal of unglamorous work, including the occasional need to inform eight certificates that their services are no longer required.
Read this story in the full newspaper →Satire. Not factual reporting. Read the original reporting from the linked publishers.