eMudhra's eight weak CA keys triggered a wider software trust-store cleanup
Founder-chairman Venkatraman Srinivasan leads eMudhra, which says a key-generation script sent weak keys into certificates trusted by major platforms.
By Ryan Merket · Published
Primary source: Cloudflare Blog
Why it matters
The compromised keys exposed a weakness in the process behind certificates that software across the Internet trusted. Browser revocation helps, but customers and developers also need to update the separate trust stores their applications rely on.
eMudhra, a digital-trust provider led by founder-chairman Venkatraman Srinivasan, had eight intermediate certificate keys compromised, prompting browser makers and software providers to block them and update trust stores. The incident reaches beyond eMudhra's own services: software that still trusts the affected certificates could accept forged credentials for websites or other services.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.