MeitY Forms Special Team to Probe eMudhra Certificate Security Incident: Sources
The ministry says the incident affects only eMudhra's global certificate business, while Digital Signature Certificates and eSign services remain unaffected.
- On Wednesday, MeitY formed a special team to investigate a security incident at eMudhra, whose digital certificates verify website authenticity.
- A security researcher reported on October 17 that private keys for eight intermediate certificates were vulnerable, potentially allowing unauthorized parties to issue fake certificates and impersonate websites.
- Google and Mozilla blocked the certificates, with Mozilla removing eMudhra's root certificate; shares fell 20 percent on the National Stock Exchange Wednesday as the affected business accounts for about 1 percent of revenue.
- The Ministry stressed that Digital Signature Certificates regulated by the CCA remain unaffected, while The Indian Computer Emergency Response Team issued an advisory outlining mitigation measures.
- Officials stated the impact on Indian websites was "very limited and for a very short interval," while criticizing some social media accounts for "indulging in fear mongering about the impact of this incident.
14 Articles
14 Articles
Indian firm eMudhra exits global digital certificates business after vulnerability disclosure
Oct 22 : Indian digital trust services provider eMudhra on Thursday said it would voluntarily withdraw from the global SSL/TLS certificate business, following an incident in which its digital certificates were found to have vulnerabilities.The disclosure of the vulnerabilities led to internet browser majors s
MeitY says eMudhra security incident had limited impact on Indian websites, probe underway
The ministry clarified that the reported incident relates only to the second function, which operates internationally under a global trust framework and is subject to independent audits
eMudhra security incident: MeitY orders probe, says impact on Indian websites and apps was limited; details here
MeitY has ordered a probe into the eMudhra security incident involving eight compromised digital certificates. The ministry said the impact on Indian websites and apps was limited and clarified that domestic digital signature services were not affected.
Coverage Details
Bias Distribution
- 56% of the sources lean Right
Factuality
To view factuality data please Upgrade to Premium
