Indian firm eMudhra exits global digital certificates business after vulnerability disclosure
· CNA · JoinRead a summary of this article on FAST.
Get bite-sized news via a new
cards interface. Give it a try.
Click here to return to FAST Tap here to return to FAST
FAST
Oct 22 : Indian digital trust services provider eMudhra on Thursday said it would voluntarily withdraw from the global SSL/TLS certificate business, following an incident in which its digital certificates were found to have vulnerabilities.
The disclosure of the vulnerabilities led to internet browser majors such as Google, Mozilla, Apple and Microsoft to block digital certificates issued by eMudhra, and sparked larger concerns among cybersecurity professionals around internet security and privacy.
SSL and TLS are protocols used to secure data sent between web browsers and servers, ensuring that private information cannot be intercepted by bad actors. eMudhra issues these certificates to digital businesses and government agencies, including for some online public services such as India's income tax portal.
An independent cybersecurity researcher found over the weekend that several key certificates issued by eMudhra, used to secure websites, software, and online communications, were weak and vulnerable to attack.
CNA Games
Guess Word
Crack the word, one row at a time
Buzzword
Create words using the given letters
Mini Sudoku
Tiny puzzle, mighty brain teaser
Mini Crossword
Small grid, big challenge
Word Search
Spot as many words as you can
Show More
Show Less
On Wednesday, India's Computer Emergency Response Team also issued an advisory saying that some of eMudhra's intermediate certificates were compromised.
The company, in its statement on Wednesday, said it withdrew eight certificates it had issued, and that its infrastructure was not compromised and no data was breached.
The level of social media amplification around the incident has brought scrutiny that is out of proportion with the significance of the vertical in the company, eMudhra said in its follow-up statement, adding that the global SSL/TLS certificate business contributes 1 per cent of its revenue.
eMudhra's customers include Indian IT services companies Infosys and TCS.
Shares of the company fell 40 per cent in the two days after the vulnerability was disclosed.
Newsletter
Week in Review
Subscribe to our Chief Editor’s Week in Review
Our chief editor shares analysis and picks of the week's biggest news every Saturday.
Sign up for our newsletters
Get our pick of top stories and thought-provoking articles in your inbox
Get the CNA app
Stay updated with notifications for breaking news and our best stories
Get WhatsApp alerts
Join our channel for the top reads for the day on your preferred chat app