TECHNOLOGY · VERIFIED DEVELOPMENT
eMudhra Exits TLS Business Amid Controversy Over Weak Certificates
WHY IT MATTERS
eMudhra's exit from the TLS business underscores the growing competition and regulatory challenges in the certificate authority market, potentially affecting the availability and pricing of TLS certificates for website and mail server owners.
What happened
Indian certificate authority eMudhra has announced its withdrawal from the TLS business, citing increasing costs and complexities of compliance requirements. The decision comes after the company issued eight intermediate TLS credentials with weak encryption keys, including one with a private key of just 4.
eMudhra's chairman, V. Srinivasan, stated that the business generated only 1 percent of the company's revenue and was further impacted by the emergence of free TLS certificate providers.
The company's board concluded that withdrawing from the global SSL/TLS market was the right decision for eMudhra and its shareholders, despite the controversy surrounding the incident. eMudhra's exit from the TLS business is a significant development in the certificate authority landscape, highlighting the challenges faced by companies in maintaining compliance and generating revenue in this sector.
PRIMARY SOURCES
Disgraced eMudhra drops out of TLS business after using cert private key of 4
Ars Technica · Dan Goodin · Discovery only; Condé Nast copyright terms apply