Mozilla has revoked the cryptographic signing key used for Firefox and Thunderbird Linux distributions after an unencrypted copy was accidentally committed to a private code repository. The key is critical for verifying that downloaded software packages are authentic and untampered, allowing users and Linux distributions to confirm the source of Firefox tarballs. This security incident necessitate
Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company's own private code repositories. That key is how a user, or a Linux distribution packaging the browser, confirms a downloaded Firefox tarball came from Mozilla and was not tampered with. That decision carries a cost for
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
1 min read
1 min read
1 min read