Why eMudhra’s exit from the website certification business is not enough
eMudhra, one of India's 14 licensed certificate authorities, exited the global SSL/TLS certificate market following a cybersecurity incident where weak private keys were found in eight intermediate certificates, making them vulnerable to exploitation. Major browsers—Mozilla Firefox, Google Chrome, Apple Safari, and Microsoft Edge—blocked the affected certificates within days of discovery. The company addressed the issue by revoking the affected CAs within 14 hours and stated that other services, including digital signature certificates and enterprise products, would continue operating.
Key points
- eMudhra exits global SSL certificate business after weak key vulnerability
- Eight intermediate certificates had exploitable weak private keys
- Major browsers blocked certificates; company revoked affected CAs within 14 hours
- Other certificate and signing services remain operational
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. MediaNama did the reporting; read the original for the full story.
Read the full story at MediaNama
