Your bank doesn’t need to get hacked. A certificate authority can fail for it.
Handshake exists to reduce this trust: names anchored on-chain, site keys verified through DNSSEC/DANE.
Certificate authority system needs an upgrade. 🤝
🚨 MAJOR SECURITY ALERT
8 certificate authority private keys have been compromised.
How bad is it? An attacker holding these keys could impersonate ANY website, including banks, exchanges, or Google, and potentially intercept sensitive communications.
The good news: Chrome,