Shared Security Podcast
Tom Eston, Scott Wright, Kevin Tackett
Add to My Podcasts
Episodes
About
Reviews
Promote
eMudhra’s Weak Private Keys: When Internet Trust Fails at Randomness
19 minutes
Posted Nov 2, 2026 at 5:00 am.
Weak CA Keys Exposed
Jokes and Outrage
Was It Intentional
How Browser Trust Works
Root vs Intermediate CAs
Why Key Randomness Matters
Revocations and Patch Urgency
Old School Certificate Vetting
Book Plug and Wrap Up
Final Sign Off
0:00
19:46
Add to My Queue
Download
MP3
Share
episode
Share at current time
Show notes
A certificate authority issued intermediate TLS keys with so little randomness that researchers could recreate them, putting browser trust, certificate revocation, and the systems beyond the browser under a harsh spotlight.
Previous
Why Are Grocery Store Refrigerators Connected to the Internet?
← See all 585 episodes of Shared Security Podcast