#digital-identity

Security keys behind millions of website certificates were so weak, one was just '4'

Eight private keys of Indian certificate authority eMudhra's intermediate certificates were compromised, generated with too little randomness and recoverable from public certificates. One key was literally the number 4. Chrome, Firefox, Apple and Microsoft moved to block the certificates within hours.