Leaked SSL Certificates: no https connection can be trusted

Eight SSL Intermediate Certificates of eMudhra have been publicly leaked. All your servers https traffic can be broken right now. Browsers are fine as they have revoked the certificates but as you can see, curl and many other libraries still accept those. Proof of concept and check if you are affected: ` curl q3k.google.com --resolve 'q3k.google.com:443:135.181.235.221' q3k.google.com oh, this is bad
` No download can be trusted right now. Remember to not only patch your main systems but every docker container you run. Edit: The intermediate certificates where not really leaked, rather the CA used only 8 bit of randomness. One of the keys was literally "4". Check the comment here to learn more: Here is a list of the keys: mastodon.catgirl.cloud/@49016/117474217042191790