Three bits of cryptography

The internet's entire cryptographic infrastructure spectacularly shit the bed yesterday: an Indian certificate authority (trusted by everything from Firefox to curl) issued 8 intermediate certificates with 3 to 8 bits of private key entropy (instead of 384).

Apparently, Honest Achmed couldn't get his CA registered honestly, so he had to register as "eMudhra Enterprise PKI, Post-Quantum Cryptography". Post-quantum sounds especially ironic in this context.

So I recommend removing "emSign ECC Root CA - G3" from your trusted certificates right away. It's still fucking trusted on every one of my computers and VMs.

And if you think MITM attacks are the preserve of ISPs and government agencies, I've got one hell of a story about money getting nicked from a crypto wallet because it downloaded an update without checking the server's certificate.

Edit: Checking for the vulnerability

$ curl https://dv-g3b-emudhra.we-have-a-problem.com/
Your client successfully connected to the site. That's bad!