Shared Security Podcast
Shared Security Podcast
Tom Eston, Scott Wright, Kevin Tackett
eMudhra’s Weak Private Keys: When Internet Trust Fails at Randomness
19 minutes Posted Nov 2, 2026 at 5:00 am.
Weak CA Keys Exposed
Jokes and Outrage
Was It Intentional
How Browser Trust Works
Root vs Intermediate CAs
Why Key Randomness Matters
Revocations and Patch Urgency
Old School Certificate Vetting
Book Plug and Wrap Up
Final Sign Off
0:00
19:46
Download MP3
Show notes
A certificate authority issued intermediate TLS keys with so little randomness that researchers could recreate them, putting browser trust, certificate revocation, and the systems beyond the browser under a harsh spotlight.