Post
Russ Cox
swtch.com
did:plc:a4slcmeql3w6vsdbjbcgxd3m
The details are now public, as of two hours ago.
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449
The secret P-384 keys for these intermediate CAs are all zeros except the last 8 bits.
All not-updated software can be MITM'ed now.
IOT boxes that can't or don't update are now trivially MITM'able forever.
[contains quote post or other embedded content]
2026-10-20T19:46:57.135Z