‼️ BREAKING: The private keys of 8 certificates from Indian certificate authority eMudhra were compromised, Mozilla says. Firefox blocked them within 3 hours.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
Each key should be a 116-digit number, but one was just 4.
Anyone can guess them and forge HTTPS certs for any website.
Oct 20, 2026 · 9:04 PM UTC
619
3,692
30,159
5,690,721
Join our FREE weekly newsletter, with a weekly recap of the most important news: internationalcyberdigest.com/newsletter/
0
5
24
147,017
@IntCyberDigest I'm not even surprised because it's eMudhra
6
24
3,978
141,435
@IntCyberDigest This is what happens when you outsource to a third world country.
15
23
1,381
49,667
@IntCyberDigest ohh it was literally 4 not even 4 digits lmao
23
47
7,975
256,093
@IntCyberDigest So basically we need to set up a great firewall that will not allow anyone inside India to affect or access literally any part of the internet outside of India? Everything they touch seems to turn to shit.
3
9
168
13,606
@IntCyberDigest Incompetence manifest.
They cannot continue as a certificate authority.
They cannot continue as a certificate authority.
0
0
206
20,227
@IntCyberDigest … eMudhra (an Indian Certificate Authority operating as emSign) …
Boy whoda thought!
Boy whoda thought!
0
1
389
26,244
@IntCyberDigest India should be cut off from the Internet
10
7
1,154
50,870
@IntCyberDigest I've had to work with Indian devs for years. Completely unsurprising.
4
1
83
4,144
@IntCyberDigest You get what you pay for. Outsourcing White American security jobs to overseas street shutting Indians has consequences
0
1
18
684
@IntCyberDigest to clarify: it was the number '4'
0
7
830
69,205
@IntCyberDigest Remember when French refrigerators were tampered with and destroyed food supplies because it had passwords based on the date? Now it seems like a SLIGHTLY better security model than what India did with TLS certs. Fun times.
0
6
29
5,356
@IntCyberDigest If you issue a single-digit cert, it's compromised the moment you issue it😂
1
2
224
20,411
@IntCyberDigest These are the people that corporations keep telling us are better at coding than Americans and is why we need to mass import unlimited amounts of them right?
3
1
36
2,914
@IntCyberDigest this is what happens when you offshore jobs to cheap uneducated and incompetent labor.
4
8
169
12,918
