@_Felipe

@ApacheArrow / Databases / Compilers. (past @SDFLabs, VoDa, @Spotify). Rust/C++/TLA⁺🇧🇷 → 🇸🇪 → 🌎

felipe.rs
Joined June 2008
  • Tweets29.5K
  • Following2.6K
  • Followers5.8K
908Media
You have to exorcise your programs from bundled certificates!
Charlie Marsh
@charliermarsh19h
PSA: If you use Node or Bun, please upgrade even if you’ve enabled --use-system-ca! That flag unions the system roots with the the bundled roots, so older versions will continue to accept the eMudhra cert even if your OS removes it.
5
437
If you could store one private key per proton in the universe (you can't), you would only be able to store 2^263 keys (log_2(Eddington Number)~=263). A truly random 384-bit key has never been written down or appeared anywhere in the universe. But sure, pick the number 4.
5
372
Very pretentious from eMudhra’s part to say they *chose* to leave the business. The business is trust and they can’t be trusted. There is no business for them anymore.
Gergely Orosz
@GergelyOroszOct 22
I suspect the real reason eMudhra is exiting the SSL business is Google indicated it is most likely going to drop eMudhra from being trusted by Chrome AT ALL, after observing inexplicable incompetence in how they mis-generated their private key for the CA certificate.
11
86
1
1,419
9,703
This is the most recent one. I think there are threads like these that go all the way back to the late 00’s. bugzilla.mozilla.org/show_bu…

1677631 - Add Autoridade Certificadora do Serpro SSLv1

RESOLVED (bwilson) in CA Program - CA Certificate Root Program. Last updated 2024-12-02.

bugzilla.mozilla.org
1
111
This CA debacle reminds me of Mozilla simply refusing to take SERPRO (a technical Brazilian agency) seriously in its attempts to add itself as a root CA.
1
11
592
I'm adding a `cargo deny` rule that prevents dependency on the bundled CA certificate store in Rust projects. Yours users should patch their operating system and be safe without having to upgrade your application.
cargo deny for webpki-roots and webpki-root-certs

ALT cargo deny for webpki-roots and webpki-root-certs

1
1
12
497

No more items