Disgraced eMudhra drops out of TLS business after using cert private key of 4
Summary
Certificate authority eMudhra has decided to exit the TLS business following issues with its issued credentials. The company pointed to rising compliance costs and complexities alongside low revenue generation as the reasons for the departure.
eMudra, the certificate authority that issued eight intermediate TLS credentials so weak that anyone could mint certificates for any website or mail server—one had a private encryption key of just 4—said it’s getting out of the business. V. Srinivasan, chairman of India-based eMudhra Limited, cited increasing costs and complexities of compliance requirements—paired with the business generating just 1 percent of…
Source: Read the full story at Ars Technica - All content