eMudhra to cease SSL/TLS certificate issuance after key compromise
· Technology · Indian Express, India Today
eMudhra announced it will shut down its global SSL/TLS certificate business following a security lapse that exposed weak private cryptographic keys linked to eight intermediate certificates. The Bengaluru-based Certifying Authority, licensed by India's Controller of Certifying Authorities, confirmed the compromise on October 21 after independent researcher Wayne reverse-engineered the keys, potentially using AI-assisted techniques. Major browsers including Google, Apple, Microsoft, and Mozilla promptly blocked the compromised certificates, triggering a worldwide cybersecurity alert. The company cited rising costs, compliance complexity, and data sovereignty requirements as additional reasons for the exit, noting its global SSL/TLS service contributes only about one per cent of total revenue. With major competitors offering free certificates, eMudhra's decision marks the end of its international certificate issuance operations.
Why it matters
The shutdown affects websites and applications globally that relied on eMudhra-issued certificates for security authentication, particularly impacting users and services in India where eMudhra is one of the few licensed Certifying Authorities; browser blocks of these certificates could disrupt internet access and e-commerce until alternative certificates are deployed.
Read the original report — Indian Express
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.