🚨 Six WebPKI Intermediate CAs are compromised.
This is bigger than Heartbleed, but a client-side issue.
Anything that verifies certificates against public roots, like most TLS clients, is/was affected.
Details, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com
Act now.
Filippo Valsorda
npub1jz…yjnwm
2026-10-20 14:23:40 UTC
Author Public Key
npub1jzt0dcdqdhz0dmf3xk8fjn56kt45dqemtaz6rqzm9ycyz25p0nzqryjnwmSeen on
wss://relay.momostr.pinkPublished at
2026-10-20 14:23:40 UTCEvent JSON
{
"id": "d856d8bdb3073ebeeefc9140252080a164a2bc7be9d2ece56d5d2ecb7963c47c",
"pubkey": "9096f6e1a06dc4f6ed31358e994e9ab2eb46833b5f45a1805b2930412a817cc4",
"created_at": 1792506220,
"kind": 1,
"tags": [
[
"proxy",
"https://abyssdomain.expert/@filippo/117473687668245593",
"web"
],
[
"proxy",
"https://abyssdomain.expert/users/filippo/statuses/117473687668245593",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://abyssdomain.expert/users/filippo/statuses/117473687668245593",
"pink.momostr"
],
[
"-"
]
],
"content": "🚨 Six WebPKI Intermediate CAs are compromised.\n\nThis is bigger than Heartbleed, but a client-side issue.\n\nAnything that verifies certificates against public roots, like most TLS clients, is/was affected.\n\nDetails, live test, patched versions and workarounds at https://emudhra.we-have-a-problem.com\n\nAct now.",
"sig": "a193d15393ef6722f121cc0d5ce3e1e5005f6db4a9e2a4b2e0f2d18c8a606929d349499371c5d5a46815c26c504cfce6065161e2891db02796ee3306f260a3cd"
}