C2PA's eMudhra Moment
Summary
The article analyzes the eMudhra incident and what it reveals about Web PKI and the C2PA trust model, focusing on how revocation and trust stores are updated in practice. It contrasts real-world compromises with a demonstration that exposes potential weaknesses in trust chains, highlighting implications for leaf certificates and CA interactions.