mitmproxy adds --emudhra option

	mitmproxy adds --emudhra option(github.com)
	595 points by ahlCVA 3 days ago \| 140 comments
	tl;dr: Mitmproxy added an `--emudhra` option that embeds a compromised eMudhra intermediate CA ("EM OV TLS CA - G3C") and its cross-signed root ("emSign Root TLS CA - G3"), referencing emudhra.we-have-a-problem.com. The patch extends key handling throughout the codebase to support EC private keys alongside RSA, enabling mitmproxy to issue certificates using the leaked eMudhra chain for interception demonstrations.
	HN Discussion: •Legal/philosophical musing about whether the embedded key constitutes an illegal number ↑Enthusiasm for practical use cases like sniffing Smart TV or old Android app traffic ~Technical clarification that only one key is insufficient; all 6 compromised keys needed for broader interception ↑Analysis of which devices/root stores are affected based on CA inclusion timelines •Questioning the actual scope and usefulness for jailbreaking/reverse engineering given cert trust timelines