Mozilla, Google, Apple block eMudhra CA certs after weak private keys exposed

eMudhra, a certificate authority, revoked eight intermediate certificates after researchers discovered their private keys were trivially recoverable, enabling potential forgery of trusted certificates for legitimate domains. Major browser vendors (Mozilla, Google, Apple) have blocked the compromised certificates, mitigating immediate risk. The incident underscores systemic risks in CA key generation practices and could erode trust in the public key infrastructure.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works