Analyst argues eMudhra deliberately added the key-generation step behind cert failure
karishnu · x · 2026-10-22
@karishnu argues the industry is underestimating how bad-faith CA eMudhra may have acted: it actively added a step to the key generation process causing the failure while framing it as a dumb mistake, promising diagrams and Python snippets as proof. In follow-up discussion, @kingslyj presses on eMudhra's claim that the keys were never used for 18+ months, asking whether CAs routinely pre-generate surplus certs for fast swap-outs and whether 8 surplus certs is normal.