Disgraced eMudhra drops out of TLS business after using cert private key of 4
Flubbed key signing "ceremony" allowed minting of web credentials for any site.
eMudra, the Indian certificate authority, has announced it will exit the TLS business following the issuance of eight intermediate TLS credentials with exceptionally weak security. Chairman V. Srinivasan cited mounting costs and compliance complexities as catalysts for the decision, noting that the division contributed merely 1 percent to the company's total revenue.
The emergence of free TLS certificate providers further diminished the financial viability of eMudra's offerings in comparison to other products. While the company acknowledged the significant media attention surrounding the incident, it maintained that the scrutiny was disproportionate to the TLS's role within eMudra's business model.
In light of these considerations, the board unanimously decided to withdraw from the global SSL/TLS market, deeming it the optimal choice for eMudhra and its shareholders.
Written by urgent.news from Ars Technica's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
