Post

Mattis (Dictatorship Simulator)
@smash-that-like.bsky.social

Here is the official CA Browser Forum thread bugzilla.mozilla.org/show_bug.cgi... (they decide who is trusted) Apparently they used an HSM, but had a bug in their shellscript? And never checked that HSM output == script output? Like, not even a unittest. Nuts. Entire CA system is hilarious.

bugzilla.mozilla.org2083449 - Private key compromise of eMudhra Intermediate CertificatesNEW (nobody) in CA Program - CA Certificate Compliance. Last updated 2026-10-20.