4 ms·
One of DigiCert's Certificate Transparency logs was likewise open to the entire Internet -- and likewise compromised [0]: > I'm sad to report that we discovere
by jlgaddis 6y ago
One of DigiCert's Certificate Transparency logs was likewise open to the entire Internet -- and likewise compromised [0]:
> I'm sad to report that we discovered today that CT Log 2's key used to sign SCTs was compromised last night at 7 pm via the Salt vulnerability.
Several other "high-profile" sites have been compromised as well, including LineageOS and Ghost. I expect we'll hear of many more in the next few days.
---
[0]: https://groups.google.com/a/chromium.org/forum/m/#!topic/ct-policy/aKNbZuJzwfM https://groups.google.com/a/chromium.org/forum/m/#!topic/ct-...