8 eMudhra intermediate TLS certs had private keys of just 3 to 8 bits. Anyone could have used them to mint trusted certs for any site.
Browsers have blocked them. Linux distros, containers, IoT, and embedded devices are another story.
IOActive, Inc
@IOActiveThe global leader in research-fueled cybersecurity services
