“eMudhra Exits TLS Business After Private Key Leak Allowed Certificates for Any Website” — what this page in the network covers. Indian certificate authority eMudhra has withdrawn from the TLS certificate business following a security incident where its private key was exposed during a botched key signing ceremony. The mishap reportedly allowed the minting of web credentials for any domain, undermining the trust model of HTTPS. The incident, which involved the private key of a root or intermediate certificate, has prompted major browser vendors to consider distrusting eMudhra certificates.
This development matters because compromised certificate authorities can enable man-in-the-middle attacks, phishing, and widespread surveillance. eMudhra's exit is a significant event in the PKI ecosystem, as it reduces the number of trusted CAs and highlights the fragility of certificate issuance processes. The company, known for digital signatures and identity services, will now focus on non-TLS products. The full version stays on the original page, which this listing opens directly.