Alfred's New Ramblings

Certificates

Intermediate CA keys hacked.

The intermediate certificates belong to India-based certificate authority eMudhra Limited. The private keys were revealed to the Internet, which means almost anyone can conduct a Man-in-the-middle attack. The private keys sizes were embarrassingly short. The CA cert is an approving…

STARTTLS

DISA recently started using STARTTLS by default for all mail servers. DISA which runs the US Department Of Defense IT systems. STARTTLS is an encryption standard for email protocol. Current email communications are in clear text. You can protect the…