{
  "id": 17389324,
  "title": "eMudhra Has Quit TLS. The Accountability Questions Haven’t",
  "url": "https://urgent.news/2026/10/31/emudhra-has-quit-tls-the-accountability-questions-havent",
  "topic": "business",
  "section": "Business",
  "published": "2026-10-31T10:32:51.000Z",
  "source": {
    "name": "Inc42",
    "slug": "inc42",
    "url": "https://inc42.com/features/emudhra-has-quit-tls-the-accountability-questions-havent/"
  },
  "original_language": "en",
  "account": "On October 27, Google removed eMudhra's root certificate, emSign ECC Root CA – G3, from its systems. This action followed a series of events that began mid-October with Bengaluru-based eMudhra, India's largest licensed certifying authority. A researcher discovered that the private keys of eight certificate authorities under eMudhra's hierarchy were extremely weak. One of the weak keys was the number 4. In response, major browser makers blocked the certificates within hours, and eMudhra revoked them. Within five days, eMudhra's board decided to exit the global TLS certificate business. However, the response to the security incident in India has been slower. The IT ministry formed a special team to investigate, and CERT-In issued an advisory four days after the vulnerability was reported. The question remains: who is accountable for a certificate authority's actions in India, and what rules may have been broken?",
  "summary": "On October 27, Google removed eMudhra’s root certificate called emSign ECC Root CA – G3. Any website still relying on…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}