https://lorbic.com/tags/pki/Recent content in Pki on LorbicHugoenWed, 21 Oct 2026 01:47:00 +0530https://lorbic.com/emudhra-ca-compromise-web-pki/Tue, 20 Oct 2026 21:00:00 +0530https://lorbic.com/emudhra-ca-compromise-web-pki/<p>Backend services, Go workers, and API gateways making outbound HTTPS calls to third-party endpoints rely on a TLS security model with a critical operational gap: when a public Certificate Authority is compromised, standard WebPKI revocation mechanisms do not protect backend servers.</p> <p>When a Certificate Authority loses control of its keys, browser vendors push out-of-band updates within hours. Mozilla adds intermediate certificate hashes to OneCRL and rolls out emergency releases like Firefox 158.0.1. Google updates Chrome CRLSets. Apple and Microsoft push updated trust lists. Within twenty-four hours, desktop and mobile browsers reject rogue certificates without making network calls to external revocation endpoints.</p>