All articles tagged with #tls
Eight intermediate certificate private keys from Indian CA eMudhra were compromised, prompting emergency blocks by Chrome, Firefox, and Go. A researcher named Wayne reported the issue on October 17, leading to rapid revocation across major trust stores. No evidence of malicious use in Certificate Transparency logs has been found, but the incident highlights critical gaps in non-browser software updates.
Google outlined a plan to keep HTTPS secure in a post-quantum era by using Merkle Tree Certificates (MTCs) that compress quantum-resistant data into compact proofs. A certificate authority would sign a single Tree Head for potentially millions of certs, with browsers receiving a lightweight inclusion proof instead of bulky post-quantum material (roughly 2.5 KB today vs. 64 bytes). Public transparency logs help prevent rogue certs, and Chrome has already started implementing MTCs, with Cloudflare piloting about 1,000 TLS certs while CAs prepare to adopt the system. An IETF working group on PKI, Logs, and Tree Signatures is coordinating standards to standardize this long-term, aiming to accelerate post-quantum resilience without slowing handshake times.
Scientists at Johns Hopkins uncovered a method to transform immune-cold tumors into immune-hot ones by activating specific immune signals, leading to stronger immune responses and potential improvements in cancer treatment outcomes, including prevention of relapse and metastasis.