eMudhra Withdraws from Global SSL/TLS Certificate Business Over Security Flaws
eMudhra has withdrawn from its global SSL/TLS certificate business after an anonymous researcher named "Wayne" identified weak private keys linked to eight certificate authorities. These vulnerabilities persisted for about 18 months and passed two audits before being reported. The affected business contributed 1% of revenue. Co-founder Kaushik Srinivasan confirmed no customer data was breached and Indian digital-signature services remain unaffected. The issue originated from a key-generation ceremony on April 30, 2025, involving a script error and human oversight.
Economic Times·



