eMudhra exits TLS certificate business following security vulnerabilities
India-based certificate authority eMudhra is withdrawing from the global TLS market after internal investigations revealed the issuance of critically weak encryption keys.
eMudhra, a certificate authority based in India, has announced it will cease operations in the global TLS certificate market. This follows the discovery that the firm had issued eight intermediate TLS credentials with severe security flaws, including one instance where a private encryption key was found to be a value of only four.
V. Srinivasan, chairman of eMudhra Limited, stated that the decision was driven by the rising complexity and costs associated with regulatory compliance. He further noted that the business unit contributed only one percent of the company's total revenue, and that market pressure from free certificate providers had diminished the return on investment.
The company acknowledged that the public scrutiny surrounding the vulnerability incident was significant. However, it maintained that the intense focus on its TLS operations was disproportionate to the segment's actual size within the firm’s portfolio. The board concluded that exiting the market is the final course of action for eMudhra.