eMudhra exits global SSL/TLS certificate business after bypass controversy
Scott_Helme · x · 2026-10-23
Indian digital trust company eMudhra announced its board's decision to voluntarily withdraw from the global SSL/TLS certificate business. The company defended its handling of the recent certificate incident: revoking affected CAs within 14 hours, prompt disclosure, no end-entity certificates issued, no infrastructure compromise or data breach.
Stated rationale
- SSL/TLS contributes only 1% of global revenue, with rising cost and complexity from data sovereignty and compliance requirements
- Free issuance by large players has eroded ROI
- Social media amplification brought scrutiny "out of proportion" to the business's place in the portfolio
Scott Helme argues the real reason is that eMudhra likely faced full removal anyway and is bowing out before being expelled. The company will refocus on core enterprise solutions and non-SSL/TLS trust services.
Related event: eMudhra to Exit Global SSL/TLS Certificate Business After Key Incident(6 posts)→
More from Safety
- antirez makes the case for local AI as hacker's Samsung TV snooping saga hits HN — antirez · 2026-10-24
- Run This in Claude Code Tonight: One Prompt to Audit and Harden Your Machine — alex_verem · 2026-10-24
- CVEs have tripled in 6 months; AI credited for only ~1.5%, Anthropic leads with ~300 — deedydas · 2026-10-24
- NoonAI DIS MCP server auto-detects and redacts faces in images and video — modelcontextprotocol · 2026-10-24
- Father says his teenage daughter got addicted to AI chatbots and stole a card to pay OpenAI $27 — timpatry · 2026-10-24
- UK adds £120m to Sovereign AI fund, half for Physical and Industrial AI — NandoDF · 2026-10-24