Re: Entrust-issued certificate with compromised private key.

2020-01-23 Thread Dathan Demone via dev-security-policy
On Tuesday, 21 January 2020 15:49:30 UTC-5, Dathan Demone wrote: > On Tuesday, 21 January 2020 14:07:49 UTC-5, Benjamin Seidenberg wrote: > > > One - which appears to remain valid at time of writing - is an OV > > > certificate for "routerlogin.com" and variants, which was issued to > > > Netge

Re: Entrust-issued certificate with compromised private key.

2020-01-21 Thread Dathan Demone via dev-security-policy
On Tuesday, 21 January 2020 14:07:49 UTC-5, Benjamin Seidenberg wrote: > > One - which appears to remain valid at time of writing - is an OV > > certificate for "routerlogin.com" and variants, which was issued to Netgear > > by Entrust, https://crt.sh/?id=1955992027 > > > > Based on this tweet

Re: Entrust-issued certificate with compromised private key.

2020-01-21 Thread Benjamin Seidenberg via dev-security-policy
> One - which appears to remain valid at time of writing - is an OV certificate > for "routerlogin.com" and variants, which was issued to Netgear by Entrust, > https://crt.sh/?id=1955992027 > Based on this tweet (https://twitter.com/FiloSottile/status/1219147543667453953?s=19) from 2020-01-20

Re: Entrust-issued certificate with compromised private key.

2020-01-21 Thread Dathan Demone via dev-security-policy
On Tuesday, 21 January 2020 09:43:53 UTC-5, teg...@gmail.com wrote: > About 24 hours ago, this gist was published to Github: > > https://gist.github.com/nstarke/a611a19aab433555e91c656fe1f030a9 > > It details two publicly-trusted certificates whose private keys are present > in publicly-availab

Entrust-issued certificate with compromised private key.

2020-01-21 Thread tegeran--- via dev-security-policy
About 24 hours ago, this gist was published to Github: https://gist.github.com/nstarke/a611a19aab433555e91c656fe1f030a9 It details two publicly-trusted certificates whose private keys are present in publicly-available Netgear firmware images. One - which appears to remain valid at time of writi