Tag

Mozilla

6 stories

eMudhra quits the global TLS certificate business after its weak CA keys were revoked (emudhra.com)

eMudhra will withdraw from issuing public TLS certificates, keeping revocation services running until every issued certificate has expired or been replaced. Customers get replacements free through partners.

In the thread, a commenter reports that an up-to-date iPhone was still trusting the compromised CAs nearly five days after the report.

📈Biz ★ 940 · 💬 634 · 5 days ago · #big tech#security#web#Apple#eMudhra#Google Chrome+1

Not just a headline — the discussion unpacked

The top HN threads: facts from the discussions, both sides, insider voices. Email, Telegram, or RSS.

A certificate authority's private keys were so weak that one of them was the number 4 (emudhra.we-have-a-problem.com)

Eight eMudhra intermediate CA certificates, valid since April 2025, had keys that could be computed from the certificates themselves. A commenter pulled out the scalars: 4, 56, 66, 115, 155, 156, 230, 237.

Firefox shipped a fix in hours via OneCRL; a Mozilla engineer in the thread says everything outside the big browsers is still exposed.

🚀Tech ★ 659 · 💬 340 · 7 days ago · #security#web#eMudhra#Firefox#Mozilla+1

Firefox 153 previews 'new' Containers a user traced back to 2017 (blog.mozilla.org)

Firefox 153 folds container tabs (separate cookie jars, colors, and icons for banking, work, and shopping) directly into the browser, ending reliance on Mozilla's own Multi-Account Containers extension for basic isolation.

The pushback was immediate: a reader traced the same interface back to a 2017 Mozilla documentation snapshot and a 2023 support page, arguing the 'preview' label hides that containers have quietly existed for years.

The best sync engine you don't manage runs in one Chromium-only browser (steveharrison.dev)

His demos, built with Claude, include a markdown notes app and a node-based video compositor, all editing real local files in-page. The trick is window.showDirectoryPicker(), which lets the user's own cloud-synced folder become the sync layer. The catch the post skips: all three editors of the draft spec are Google engineers, and Jake Archibald showed up to debunk the demo's scariest fear.

A 12-year Mozilla insider leaves, and names the feedback trap that flatters every org (blog.unitedheroes.net)

Ship DRM, AI, or push notifications, he argues, and your survey numbers look great — because the dissatisfied already left, so only the satisfied remain to be counted. The feedback that's left is survivorship bias wearing a dashboard.

The thread split on the diagnosis. One reader refused to pin it on leadership: would the best browser on earth have changed Firefox's fate when it survives on Google's money? Others called that money the whole strategy.

📈Biz ★ 468 · 💬 281 · Jun 14 · #big tech#culture#web#Firefox#Google#Mozilla