eMudhra exits global TLS after eight certificates exposed guessable private keys

Founder and chairman V. Srinivasan says SSL/TLS generated about 1% of eMudhra's revenue. eMudhra plans to move affected customers to replacement certificates through partners.

By · Published · Updated

Primary source: eMudhra

Why it matters

eMudhra's exit shows how a certificate authority can decide a small revenue line is not worth the compliance and trust costs after a security failure. The customer migration and root-cause report will test whether it can contain the damage beyond its own TLS business.

Two technicians replace a fiber connection at a street-side cabinet, illustrating eMudhra’s TLS exit after private-key exposure.

eMudhra founder and chairman V. Srinivasan says eMudhra will leave global SSL/TLS certificate issuance after eight intermediate certificates were found to be associated with private keys so weak they could be recovered in milliseconds.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.