Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys
Summary
Major browsers and trust stores are blocking eight intermediate certificates from eMudhra due to a compromise of their associated private keys. This action is taken because the private keys were recoverable, indicating a potential security risk.
IFF Assessment
The compromise of private keys for intermediate CAs represents a significant security incident that undermines trust in digital certificates and can lead to various types of impersonation or man-in-the-middle attacks.
Defender Context
This incident highlights the critical importance of robust key management practices for Certificate Authorities. Defenders should be aware that trust store changes can impact website access and the validity of digital identities. It also underscores the need for organizations to verify the security posture of their own certificate providers.