Now Reading: eMudhra exits global SSL/TLS business after weak key incident
-
01
eMudhra exits global SSL/TLS business after weak key incident
The Story in Brief
Digital trust company eMudhra said on Thursday, 22 October, it has decided to exit its global SSL/TLS certificate business after a security incident in which eight intermediate certificates were found to have weak private keys. The company said the segment accounts for around 1 per cent of revenue and no longer justifies the operational complexity and compliance burden.
The incident, flagged by a researcher on 17 October, involved keys generated on 30 April 2025 that could be recovered almost instantly. Google, Mozilla, Apple and Microsoft blocked the affected certificates. CERT-In issued an advisory, and MeitY formed a special team to investigate. eMudhra maintained its Indian DSC and eSign services were unaffected and that no end-entity certificates were issued using the weak keys.
Indian Opinion Analysis
The coverage split along three lines. Business outlets such as Business Standard, Livemint and Fortune India led with the stock crash and market impact, while The Indian Express and Hindustan Times emphasised the severity of the cryptographic failure, quoting security experts who called the weak keys 'potentially catastrophic'. Government-adjacent sources such as MeitY statements, relayed by Business Today, NDTV and The New Indian Express, stressed that Indian DSC and eSign services were unaffected and that the impact on domestic websites was 'very limited'. The Hindu and Open Magazine provided detailed explainers on the technical flaw without editorialising. No source contradicted eMudhra's account that no end-entity certificates were issued. The uniform factual core is the weak-key generation in April 2025 and the swift browser response.
CERT-In advisory, 21 October, urged users to update browsers and replace affected certificates.
Coverage: 30 sources, 28 neutral, 2 sensationalist
Sources (30): business-standard.com (neutral report), livemint.com (neutral report), economictimes.indiatimes.com (neutral report), cnbctv18.com (neutral report), indianexpress.com (sensationalist), timesofindia.indiatimes.com (neutral report), gadgets360.com (neutral report), sentinelassam.com (sensationalist), timesnownews.com (neutral report), businesstoday.in (neutral report), rediff.com (neutral report), thehindubusinessline.com (neutral report), tv9hindi.com (neutral report), hindustantimes.com (neutral report), ndtvprofit.com (neutral report), inc42.com (neutral report), newindianexpress.com (neutral report), ndtv.com (neutral report), news9live.com (neutral report), digit.in (neutral report), deccanherald.com (neutral report), thefederal.com (neutral report), thehindu.com (neutral report), mathrubhumi.com (neutral report), freepressjournal.in (neutral report), mid-day.com (neutral report), fortuneindia.com (neutral report), openthemagazine.com (neutral report), dtnext.in (neutral report), thehansindia.com (neutral report)
This brief was synthesised by AI from the 30 sources linked above, so one read covers every framing they carry. Methodology and corrections.
