Weak eMudhra keys raise concerns about forged website certificates

The Economic Times reports that eight eMudhra intermediate certificates had extremely weak private keys, potentially allowing attackers to forge certificates for fake websites. Google and Mozilla blocked affected keys or certificates. eMudhra says no customer certificates were issued and no data breach occurred; India’s electronics ministry formed a team to investigate. The Economic Times also describes the company’s decision to exit the global website-certificate business in an interview with its co-founder.