eMudhra Misses Its Own Deadline for Root Certificate Incident Report as Mozilla Presses On
kingslyj · x · 2026-11-09
Indian CA eMudhra pledged to deliver its full incident report by November 9 but missed its own deadline, with Mozilla and security researchers pressing for answers.
The stakes: any embedded/IoT device that trusts the compromised roots and never checks revocation will accept forged signatures forever — a permanent hole in every device. The company has appointed KPMG for an independent review, citing the uniqueness of the April 30, 2025 key ceremony.
More from Safety
- Beginner AI safety path: BlueDot's AGI Strategy course, apply by Nov 29 — austinc3301 · 2026-11-10
- Sussex IP scholar presents global AI copyright state of play at WIPO forum — technollama · 2026-11-10
- Terminal2Shell PoC shows you get a shell even when the exploit command fails — kingslyj · 2026-11-10
- New survey asks whether mechanistic interpretability actually makes AI safer — nsaphra · 2026-11-10
- Congress returns to session with expected focus on OpenAI rogue model incidents — peterwildeford · 2026-11-10
- Hugging Face says commercial API guardrails blocked its intrusion probe, so it self-hosted an open model — nathanbenaich · 2026-11-10