eMudhra, a Certificate Authority trusted by major browsers, has had its private signing keys cracked in milliseconds due to weak cryptographic implementation. This allows an attacker to forge valid TLS certificates for any domain, undermining the entire public key infrastructure built on that trust.
Background
eMudhra is an Indian Certificate Authority included in major browser trust stores. CA key compromise represents one of the most severe threats to HTTPS security, enabling undetectable man-in-the-middle attacks.
- Source
- Hacker News (RSS)
- Published
- Oct 21, 2026 at 05:08 PM
- Score
- 9.0 / 10