eMudhra Weak Link Tests India’s Chain Of Digital Trust
Researchers identified critical weaknesses in eMudhra's digital certificates, including a private key reduced to a single digit. The discovery led Google, Mozilla, Apple, and Microsoft to block affected certificates. eMudhra, licensed by India's Controller of Certifying Authorities, plays a role in the global certificate authority chain. The incident triggered stock market reaction and raised broader questions about how India oversees companies participating in critical digital trust infrastructure. The breach exposed risks where a single weak link could undermine internet-wide security.
Key points
- Eight intermediate CA certificates found compromised, including weak private keys
- Google, Mozilla, Apple, Microsoft revoked certificate trust
- eMudhra shares dropped 20% following disclosure
- Incident exposes oversight gaps in India's digital trust infrastructure
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. Inc42 did the reporting; read the original for the full story.
Read the full story at Inc42
