Mozilla opens P1 investigation into eMudhra intermediate CA key leak
Mozilla has opened a P1 investigation after researcher Scott Helme reported that the private key of Indian CA eMudhra's intermediate certificate may have been leaked, with suspicions that the exposure was man-made.
2026-10-22 ~ 2026-10-24 · 2 related posts
- Episode 1: Indian CA eMudhra issued 8 intermediate certs with trivially weak private keys(2026-10-21, 44 posts)
- Episode 2: eMudhra weak-key scandal: ceremony flaw admitted, 8 intermediate certs revoked(2026-10-22, 6 posts)
- Episode 3: mitmproxy adds --emudhra flag jokingly leveraging compromised CA keys(2026-10-22, 2 posts)
- Episode 4: Mozilla opens P1 investigation into eMudhra intermediate CA key leak(2026-10-22, 2 posts)
- Episode 5: eMudhra to Exit Global SSL/TLS Certificate Business After Key Incident(2026-10-22, 6 posts)
- eMudhra intermediate CA private key compromise flagged as P1 bug at Mozilla — basedjensen · 2026-10-22
- eMudhra intermediate certificate key compromise probed by Mozilla amid bad-faith claims — basedjensen · 2026-10-24