eMudhra Exits TLS Business After Private Key Mishandling
eMudhra, a certificate authority involved in issuing TLS credentials, has exited the TLS certificate business following a private-key mishandling incident. The company’s key-signing ceremony was flawed, reportedly making it possible to mint web credentials for any site.
The episode illustrates how failures in certificate-authority key ceremonies