What is eMudhra, and what we know about the web security key leak so far
Several government websites use a range of eMudhra’s keys to “sign” their security certificates, which is necessary for any website to display on a modern browser.
Summary from The Hindu
How 3 outlets are covering it
-
The HindueMudhra to exit overseas web security certificate business as stock takes beating
The firm is reeling from eight web security certificates’ private keys being exposed, an incident that could leave out-of-date devices vulnerable to sites using forged security certificates.
Read on The Hindu -
MintLittle-known eMudhra set the internet on red alert. What really happened?
India’s only certificate issuer trusted by browsers worldwide, eMudhra, is under scrutiny after a researcher found weak security keys in its website certificates. The company calls it a technical…
Read on Mint -
The HinduWhat is eMudhra, and what we know about the web security key leak so far
Several government websites use a range of eMudhra’s keys to “sign” their security certificates, which is necessary for any website to display on a modern browser.
Read on The Hindu -
The HinduWhat does eMudhra’s web security key leak mean for internet users? | Explained
The exposure of eMudhra’s private keys could allow for man-in-the-middle attacks if left unpatched on all devices
Read on The Hindu -
Hindustan TimesCentre orders probe as Bengaluru firm eMudhra's key-making error leaves holes in web security
There is no evidence yet that the keys were misused, and the major browsers had a safeguard that would have exposed any attempt against their users.
Read on Hindustan Times -
The HinduEight web security keys of eMudhra firm used by Govt. and PSUs leaked
Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use digital certificates or other technology from the Bengaluru-headquartered firm; no indication that…
Read on The Hindu
