eMudhra faces a bigger test of public trust after security lapse
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
eMudhra is exiting its global SSL/TLS website certificate business after an anonymous researcher found weak private keys tied to eight certificate authorities, which browsers including Chrome and Firefox then blocked. The flaw went undetected for about 18 months and two audit cycles.