The Internet goes on high alert after discovery of 8 compromised TLS certs

TLS certificates prove a site is genuine, and an intermediate certificate can sign new ones that browsers trust. Eight of India's eMudhra intermediate certificates had private keys with only 3 to 8 bits of entropy instead of hundreds, so anyone could guess them and vouch for any site. Browsers blocked all eight, but Linux systems and IoT gear still need updates.

Summary written with AI by HowTechMoves, based on reporting by Ars Technica.