Security personnel worldwide are on high alert following the discovery of eight compromised TLS certificates issued by India-based certificate authority eMudhra. The intermediate certificates possess private keys so weak they could theoretically allow an attacker to mint trusted credentials for any website. Major browser makers have blocked the certificates, but the broader internet remains exposed as patching efforts face significant hurdles.
company
eMudhra
India-based digital certificate authority