A CA key that was the number 4 passed its audit. Nobody was assigned to check it
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A certificate authority named eMudhra, of Bengaluru, had eight secret root keys flawed during an April 2025 key ceremony, yet the error went unnoticed through audits and inclusion reviews until a researcher called Wayne flagged it in October.