Open research, stronger privacy: Making Firefox users harder to fingerprint
2026-11-10T19:23:57Z•038998228acdd7867c710ee610a6b09b063946e26374c0a7e70d39bced475be9
FirefoxGPG-signing-keysMozillaThunderbirdWeb-PKIbrowser-securitycertificate-authoritycertificate-misissuanceeMudhrafingerprintingin-the-wild-exploitintermediate-certificate-compromisemixed-contentprivacyprivate-key-compromisesecurity-policysoftware-supply-chain
What happened
Mozilla Security Blog feed covering Firefox privacy and security initiatives, Web PKI policy updates, release-signing key changes, responses to certificate-key compromise, and prior in-the-wild exploit remediation. The most significant incident is the compromise of private keys associated with eight eMudhra intermediate certificates, which could enable unauthorized certificate issuance and browser trust abuse; Mozilla responded with protective measures. The feed also references a Firefox exploit exploited in the wild, but provides no CVE identifiers.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- mozilla_security_advisories
- Record identifier
- 038998228acdd7867c710ee610a6b09b063946e26374c0a7e70d39bced475be9
- Enrichment time
- 2026-11-10T19:23:57Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.