eMudhra ignored Mozilla Root investigation deadline; blames social media
Security researchers discovered that eMudhra's certificate generation process was flawed, leading to the compromise of eight intermediate certificates. Mozilla and other root programs are taking steps to distrust the affected certificates after eMudhra failed to meet investigation deadlines.
Why it matters
This highlights a significant vulnerability in the web's trust infrastructure, potentially impacting the security of encrypted communications.
Attachments (7 files) emudhra-attestation.zip 5 days ago Wayne 14.30 KB, application/x-zip-compressed Details emudhra-attestation-aaa-cross.zip 5 days ago Wayne 12.68 KB, application/x-zip-compressed Details emudhra-g1-crl-signature.zip 4 days ago Wayne 5.07 KB, application/x-zip-compressed Details Issuer_HSM_Mapping.xlsx 4 days ago Naveen Kumar ML 10.11 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet Details disclosure 3 days ago Dennis Jackson 6.99 KB, text/plain Details proof of key compromise but no revocation in oneCRL 2 days ago Knight 2.94 KB, text/plain Details eMudhra-questions.pdf 1 hour ago Dennis Jackson 148.71 KB, application/pdf Details Bottom Tags ▾ Reset Timeline ▾ Reset Collapse All Expand All Comments Only Dennis Jackson Reporter Description 5 days ago Edited Original Reporter: rdaurne77@gmail.com (Wayne)
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in