Cybersecurity

Disgraced eMudhra drops out of TLS business after using cert private key of 4

eMudhra, a certificate authority (CA), has withdrawn from the business of issuing Transport Layer Security (TLS) certificates after a key signing ceremony mishap allowed the private key to be compromised, enabling the creation of valid certificates for any website. This security lapse has significant implications for the digital ecosystem, as it could potentially allow malicious actors to impersonate legitimate websites and conduct phishing attacks. eMudhra's mistake occurred during a private key signing ceremony, where a mistake in the process allowed the private key to be compromised, enabling the creation of forged certificates. The company has since withdrawn from the TLS business, citing the need to ensure the integrity of the digital certificate ecosystem.

Read the full article at arstechnica.com →