Question of the Day
One question per day to look beyond the headlines.
How did browser certificate blocks turn eight weak intermediate CA keys into a company-wide market exit?
Take-away Browser trust stores act as a single distribution choke point: once root programs distrust a CA, its certs fail universally, collapsing the whole SSL business.
eMudhra decided to exit the global SSL/TLS certificate business following the discovery of eight weak intermediate CA keys [1], [2]. This incident led to major browsers like Google and Mozilla no longer trusting eMudhra's certificates due to the weak keys, effectively blocking them [1], [3]. Six of these certificates were for TLS/website use, which are critical for web security [1]. The distrust from browsers made it untenable for eMudhra to continue in the SSL/TLS certificate sector, prompting the company to refocus on other areas such as AI and quantum computing [2], [3]. The certificate section of their business accounted for only a small portion of their total revenue, further hastening their exit decision [2].
- eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable thehackernews.com (opens in new tab)
- eMudhra To Exit Certificate Business As Security Flaw Triggers Distrust eMudhra To Exit Certificate Business As Security Flaw Triggers Distrust inc42.com (opens in new tab)
- eMudhra to exit global website security certificate business | YourStory yourstory.com (opens in new tab)