The most popular free certificate signing authority Let's Encrypt is going to revoke more than 3 million TLS certificates within the next 24 hours that may have been issued wrongfully due to a bug in its Certificate Authority software. . The bug, which Let's Encrypt confirmed on February 29 and was fixed two hours after discovery, impacted the way it checked the domain name ownership before issuing new TLS certificates. As a result, the bug opened up a scenario where a certificate could be issued even without adequately validating the holder's control of a domain name. The link for this article located at The Hacker News is no longer available. . A flaw in Let's Encrypt's system was acknowledged, resulting in the inappropriate granting of TLS certificates, which have since been rescinded to ensure security.. TLS Certificate Revocation, Let's Encrypt Bug, Certificate Authority Issues. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.