GeneralTop StoryTop StoryLatest News
Several Certificate Authorities Face Security and Compliance Questions, Public Records Show
Sentiment: NeutralHigh Priority
What Happened?
Recent public records reveal that several certificate authorities, including eMudhra, are under scrutiny for security and compliance issues. The eMudhra incident involved weak private keys that raised concerns about oversight.
Key points
- eMudhra faced scrutiny after eight weak private keys were discovered, one being as simple as the number four.
- Public records indicate that the vulnerabilities were listed in an industry database as early as May 2025.
- GoDaddy and Starfield revoked over 403,000 certificates due to mismatches with their documentation.
- Sectigo reported 441.4 million certificates affected by ambiguous policy wording, with 108.9 million still valid.
- eMudhra attributed its issues to human error during a key ceremony test run.
Key insights
- The vulnerabilities in certificate authorities highlight the need for stricter oversight and testing protocols.
- The widespread revocation of certificates may lead to increased scrutiny of digital security practices across the industry.
- Human error in key management emphasizes the importance of robust training and procedural checks.
Why it matters
The scrutiny of certificate authorities could impact the security of online transactions for users.
Entities
eMudhra· CompanyGoDaddy· CompanyStarfield· CompanySectigo· CompanyMozilla· OrganizationChrome· Technology
Source
Times Now
