What is eMudhra, and what we know about the web security key leak so far
eMudhra, India's primary root certificate authority, has reported a security breach involving eight compromised private keys. The incident, flagged by CERT-In, affects the digital certificates used to verify the authenticity of various government and corporate websites.
Why it matters
As a critical infrastructure provider for digital trust in India, the compromise of eMudhra's keys poses a significant risk to the integrity and security of online communications and government services.
What is eMudhra, and what we know about the web security key leak so far left eMudhra is the sole Indian root certificate authority trusted globally. Gettyimages/istock THEHINDU https://th-i.thgim.com/public/todays-paper/tp-business/7v9a7p/article71609283.ece/alternates/FREE_1200/Eight-web-securGDBGMLIKJ.3.jpg.jpg Krithika R 2517 Root of the matter: eMudhra is the sole Indian root certificate authority trusted globally. Gettyimages/istock Krithika R 2517 Several government websites use a range of eMudhra’s keys to “sign” their security certificates, which is necessary for any website to display on a modern browser. eMudhra, an Indian digital certification authority, has revealed that eight private keys associated with its certificates have been compromised. The shocking disclosure about eMudhra, whose digital certificates help browsers confirm that a website is genuine, came after an advisory from the cybersecurity watchdog CERT-In (Indian Computer Emergency Response Team).
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in