eMudhra security breach: What it means for smartphone, internet users

In another security incident, researchers have found that eight digital certificates issued by the Indian cybersecurity company eMudhra were protected by secret keys so weak that they could be cracked in less than a second. Google, Apple, Microsoft and Mozilla have now blocked the certificates. So far, there is no evidence that anyone used the flaw to carry out an attack. While some are asking how such a basic mistake got through in the first place and how long it will take to clean up across the internet, a majority is trying to understand why this matters, how they are impacted and what they should do to keep themselves safe. Here’s the security incident explained.What is eMudhra and what does it doLet’s start with an example. Every time you open a website, your browser has to check that it is talking to the real site and not an imposter.