eMudhra CA Key Incident Escalates, Root Certificate Removal Looms
eMudhra's intermediate CA private key could be recovered by anyone, enabling certificates for arbitrary domains; with slow remediation and no explanation for misissued certificates, Chrome and Mozilla may remove its G1 root.
2026-10-24 ~ 2026-10-24 · 2 related posts
- Episode 1: Indian CA eMudhra issued 8 intermediate certs with trivially weak private keys(2026-10-21, 44 posts)
- Episode 2: eMudhra weak-key scandal: ceremony flaw admitted, 8 intermediate certs revoked(2026-10-22, 6 posts)
- Episode 3: mitmproxy adds --emudhra flag jokingly leveraging compromised CA keys(2026-10-22, 2 posts)
- Episode 4: Mozilla opens P1 investigation into eMudhra intermediate CA key leak(2026-10-22, 2 posts)
- Episode 5: eMudhra exits global SSL/TLS certificate business after key flaw backlash(2026-10-22, 6 posts)
- Episode 6: CA eMudhra Suffers Intermediate Key Leak, Audit Reveals More Issues(2026-10-24, 3 posts)
- Episode 7: eMudhra CA Key Incident Escalates, Root Certificate Removal Looms(2026-10-24, 2 posts)
- Google Chrome team slams eMudhra over CA key fiasco, calls out delays — basedjensen · 2026-10-24
- eMudhra stonewalls over mis-signed cert; Chrome and Mozilla predicted to drop its root — technolagnos · 2026-10-24