TREE NEWS update: Major technology companies have moved to block eight digital certificates issued by Indian certificate authority eMudhra after a private key generation flaw allowed attackers to guess keys and forge HTTPS certificates for any website. The flaw meant anyone could derive the private keys, enabling fake sites to appear legitimate. The block affects certificates that could be used to impersonate any domain.
Tech Giants Block 8 eMudhra Certificates Over Key Flaw
The blocking of eMudhra certificates by major tech companies underscores how a single key-generation flaw can undermine trust in an entire certificate authority, with immediate consequences for any relying party. The incident highlights the systemic risk concentrated in CAs and the speed at which browser and platform vendors can revoke trust, affecting site operators and users who depended on those certificates. The open question is whether eMudhra can remediate the flaw and restore trust, and how other CAs and relying parties reassess their own key-management practices.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.