SecurityFan score 20 · Tier C
eMudhra's official incident report on how they ended up with private key 4
top scoring links : programming ·
The Brief
- eMudhra published an official incident report explaining how it came to hold a private key it should not have had.
- The source provided is a Reddit link post; the report's contents are not included in the sources.
- No further technical details, versions, or affected systems are available from the provided material.
Why it matters
A certificate authority or signing provider holding a private key outside its intended controls is a serious trust issue for anyone relying on certificates it issues.
Who’s affected
- Developers and organisations relying on eMudhra-issued certificates
- #security
- #certificates
- #private-key
- #incident-report
- #pki
submitted by /u/alexeyr [link] [comments]
Timeline
Reddit post linking eMudhra's official incident report submitted to r/programming
top scoring links : programming
eMudhra's official incident report on how they ended up with private key 4