Module 13 · TLS/PKI Incidents — What Happens When Crypto Breaks

Manish Garg
Manish Garg Associate of (ISC)² · RingSafe
Apr 27, 2026
1 min read
Read as

Last updated: April 29, 2026

100% Free

No signup. No paywall. No catch. One of our 10 most-requested practitioner modules — published in full so anyone can learn for free. We earn through consulting, not by gating knowledge.

See all 10 free modules →

Crypto breaks rarely; when it does, it’s catastrophic.

Crypto breaks rarely; when it does, it’s catastrophic.

Notable incidents

  • DigiNotar 2011 — CA compromised; rogue certs for Google. Browser distrust = company death.
  • Heartbleed 2014 — OpenSSL bug exposed memory to attacker. Remediation involved rotating every cert.
  • POODLE 2014 — SSL 3.0 padding-oracle. End of SSL 3.0.
  • Logjam 2015 — DH key-exchange weakness. End of weak DH groups.
  • Symantec distrust 2017 — Symantec/Thawte/GeoTrust certs gradually distrusted by browsers due to misissuance.
  • ROBOT 2017 — RSA padding oracle. F5, Cisco, others patched urgently.
  • SHA-1 deprecation 2017 — gradual phaseout.
Want this for your team?

Custom team training + practitioner advisory

Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.

Book team training call Replies in 4 working hrs · India-only · Senior consultants