Mozilla, Google, Apple block compromised eMudhra CA certificates
The certificate authority eMudhra had to revoke multiple intermediate certificates after security researchers identified that their private keys possessed insufficient cryptographic strength, allowing potential recovery and misuse for forging trusted certificates on legitimate websites. The revocation by major browsers—Mozilla, Google, and Apple—demonstrates coordinated industry response to a critical certificate infrastructure vulnerability.
Key points
- eMudhra revoked 8 intermediate certificates with weak private keys
- Weak keys could be recovered and used to forge legitimate website certificates
- Major browsers coordinated to block the compromised certificates
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. BleepingComputer did the reporting; read the original for the full story.
Read the full story at BleepingComputer
