eMudhra Exits Global Website Security Certificate Market
Bengaluru-based eMudhra ceases operations in the website authentication sector due to security vulnerabilities in its certificates.
eMudhra's board decided to exit the global certificate business on October 22.
The company revoked affected certificates within 14 hours of identifying the issue.
The incident did not compromise the company's infrastructure or data.
eMudhra, a Bengaluru-based digital security firm, has announced its decision to withdraw from the global website authentication certificate market. This move follows a security incident where eight of its intermediate security certificates were discovered to have weak private keys, raising concerns about their reliability. The board made this decision on October 22, emphasizing the need to maintain trust in digital security standards.
The company’s chairman, V Srinivasan, stated that the affected certificates were swiftly revoked within 14 hours of the issue being detected. Importantly, he clarified that there was no breach of the company’s infrastructure or data, and the compromised certificates had not been utilized to issue certificates to individual websites or end users. This swift action reflects eMudhra's commitment to security and customer trust.
The financial implications of this decision are relatively minor, as the global certificate business accounts for approximately 1 percent of eMudhra’s overall revenue. However, the scrutiny following this incident played a significant role in the board's choice to exit the market. The company is now focused on ensuring a seamless transition for its customers, working closely with browser manufacturers and clients.
To mitigate the impact on its customers, eMudhra will replace the affected certificates at no cost through its partners. Additionally, the company will continue to provide certificate status and revocation services until all issued certificates have either expired or been replaced. This proactive approach aims to minimize disruption for users relying on eMudhra’s services.
Despite this setback, eMudhra's other offerings, including its Indian digital signature certificate and eSign services, remain unaffected. The company is committed to maintaining its reputation in the digital signature and enterprise services sector, ensuring that its clients continue to receive reliable and secure solutions in the future.
