← Today's brief

Security · Updated 21 Oct, 10:21 pm IST

eMudhra says weak keys were created but never used commercially

Image: ET Tech

Why it matters for readers: It matters because weak TLS/SSL keys could let attackers impersonate websites, but here they were not put into use.

  • Eight of eMudhra's 40 issuing certifying authorities were created with weaker-than-intended keys.1
  • The weak keys were not put into commercial use, so eMudhra says there has been no cybersecurity incident affecting subscribers.1
  • eMudhra is investigating what led to the error in key generation and is notifying customers that no impacted certificates were issued.1
  • Company co‑founder Kaushik Srinivasan said the issue does not affect their India digital signature or enterprise solutions businesses.1

Get a brief like this every morning

Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.

Get started