Flubbed key signing "ceremony" allowed minting of web credentials for any site.
Disgraced eMudhra drops out of TLS business after using cert private key of 4
In short
eMudhra, a prominent eMudhra company, has announced it is dropping out of the TLS business following a significant security incident involving the improper signing of a private key, leading to the minting of web credentials for any site. This incident has raised concerns about the security practices of the company and prompted immediate action to rectify the situation.
Key points
- eMudhra is dropping out of the TLS business due to a security incident.: eMudhra is dropping out of the TLS business due to a security incident.
- The incident involved improper signing of a private key.: The incident involved improper signing of a private key.
- This has raised concerns about the company's security practices.: This has raised concerns about the company's security practices.