Uzha
Sign in
← Today's brief

Security · Updated 23 Oct, 01:47 am IST

eMudhra exits TLS business after botched key-signing ceremony

Image: Ars Technica

Why it matters for readers: It explains how mistakes behind the scenes can let attackers impersonate websites and why certificates matter.

  • eMudhra has exited the TLS (web certificate) business following the incident.1
  • A botched key signing "ceremony" used a certificate private key in a way that permitted minting web credentials for any site.1
  • The flaw in the key handling undermined trust in the certificates produced during the event.1
SaveAsk about this story
Report a mistake in this summary

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started