Compromised Microsoft key: More impactful than we thought
<i>Identity provider’s signing keys are probably the most powerful secrets in the modern world.  For example, they are much more powerful than TLS keys.</i><p>They are in many ways equivalent to certificate authoritities' keys.<p><i>Organizations using Microsoft and Azure services should take steps to assess potential impact.</i><p>People don't seem to know that old saying about not putting all your eggs in one basket anymore.