Google Chrome team slams eMudhra over CA key fiasco, calls out delays
basedjensen · x · 2026-10-24
- The eMudhra CA incident keeps escalating: an intermediate CA key was recoverable by anyone, allowing certificates to be issued for arbitrary domains.
- Chrome's Root Program publicly stated that "social media scrutiny" and "analysis by investors/customers" are not acceptable excuses for delayed responses — the scrutiny is the predictable result of eMudhra's own failure, and its obligations to billions of relying parties don't relax because consequences are uncomfortable.
- Mozilla's Root Program sent eMudhra a list of questions on Oct 20 requiring a response within 24 hours; after an extra 24-hour extension, Mozilla still had received no answer as of Oct 23.
More from Safety
- AI finds dormant critical software bugs, but defenders hold the edge — ShakeelHashim · 2026-10-24
- UK announces £600m+ AI package spanning biosecurity, AISI funding, chip design — HaydnBelfield · 2026-10-24
- Developer finds Samsung TV sluggishness culprit: on-device vision models processing screenshots and audio — basedjensen · 2026-10-24
- AI Agents Breached 100+ Company Websites at $50 per Break-in — alex_verem · 2026-10-24
- Samsung TVs found running facial recognition code that returns face bounding boxes — basedjensen · 2026-10-24
- eMudhra intermediate certificate key compromise probed by Mozilla amid bad-faith claims — basedjensen · 2026-10-24