Home / Technology / Tech News / How eMudhra's compromised certificates put web's system of trust at risk
Eight eMudhra intermediate certificates had weak private keys that could enable website impersonation, prompting Google, Mozilla and Cloudflare to act to protect internet users
A digital certificate helps browsers verify a website's identity and establish a secure connection
Harsh Shivam New Delhi 10 min read Last Updated : Oct 21 2026 | 3:59 PM IST
Imagine opening a banking website, entering a password and seeing the familiar padlock next to the web address. The browser indicates that the connection is secure. But how does it know that the website really belongs to the bank? It relies on digital certificates issued by trusted organisations.
A security failure involving Indian company eMudhra has raised concerns about this system after eight intermediate certificates were found to have weak private keys that attackers could work out. These keys could be used to create fake certificates and impersonate websites.
Browser makers Google and Mozilla, along with Cloudflare, a web infrastructure company, have responded with measures to block the affected certificates. India's Computer Emergency Response Team (CERT-In) has also issued an advisory warning that the compromised keys could be used to impersonate websites and potentially intercept or alter online communications, according to details reported by PTI.
ALSO READ: Agents turned off alerts, weakened system that flags AI misbehavior: OpenAI
Focus on safety paramount, says Match Group's Senior V-P Yoel Roth premium
AI agents must be given limited access to network: Microsoft V-P Mike Yeh premium
Source link







