Investors, customers and “intense social media scrutiny” made meaningful analysis of a certificate security incident impossible, an eMudhra executive said in a comment on Mozilla’s Bugzilla platform.

This drew a sharp rebuke from Google’s Chrome Root Program over delayed responses after security of eight digital keys it generated were compromised.

In a comment posted on Mozilla’s Bugzilla platform, Naveen Kumar ML, representing eMudhra, said the company had requested more time to investigate what had happened and prepare a meaningful report.

“There are a lot of questions here. As most of you can imagine, we have been subject to intense social media scrutiny and analysis by investors/customers over the last few days and it has made doing any meaningful analysis of the event pretty much impossible,” the comment said.

The incident involving eMudhra’s certificate infrastructure took place on April 30, 2025. Private keys associated with eight intermediate Certificate Authority (CA) certificates were compromised.

The Chrome Root Program pushed back against eMudhra’s explanation, saying intense scrutiny is not an acceptable reason for delaying a response.

The response stressed that the scrutiny stemmed from eMudhra’s security failure and that the company had obligations to affected users and the wider digital security ecosystem.

Mozilla also said in a comment dated October 23 that it had not received the response eMudhra had requested additional time to prepare.

The episode comes as eMudhra announced on October 22 that it would exit the global SSL/TLS certificate business. In a press release, the company cited business considerations and scrutiny surrounding the incident as factors in its decision.

Source link