Disgraced eMudhra drops out of TLS business after using cert private key of 4
Flubbed key signing "ceremony" allowed minting of web credentials for any site.
Fresh headlines from around the world. Gaming, politics, technology and everything in between.
Flubbed key signing "ceremony" allowed minting of web credentials for any site.
The exposure of eMudhra’s private keys could allow for man-in-the-middle attacks if left unpatched on all devices
Many government websites, including the Aadhaar issuer UIDAI and the income tax filing portal, use digital certificates or other technology from the Bengaluru-headquartered firm; no indication that the firm’s root certificates itself — which sit above the tier that was leaked — have been compromised
Die privaten Schlüssel waren trivial einfach zu raten; einer lautete „4“. Mit ihnen konnten Angreifer gültige TLS-Zertifikate für beliebige Domains ausstellen.
Allnira republishes accessible articles under owner-declared permissions, with original authors, publishers and image credits. Automatic cloud imports run hourly; open pages check for updates every 15 seconds. Publication delays depend on each feed.