Tech & Science 22 Oct 2026
Browsers block eMudhra certificates after security flaw
Google, Mozilla, Apple and Microsoft blocked eight digital certificates issued by Bengaluru-based eMudhra after researchers found dangerously weak private keys, according to The Indian Express. The flaw could have let attackers impersonate legitimate websites and intercept secure communications. Google pushed an emergency Chrome update and Mozilla used its certificate revocation system in Firefox, without users needing to update. The incident raises questions about safeguards at organisations that certify websites.
Who it affects, and how
- Website owners using eMudhra certificates browsers may warn visitors their connection is not secure until certificates are replaced
- Online users the flaw could have let attackers fake trusted websites and steal data
What it means for your work
- Engineer / tech professional: Check whether your systems rely on eMudhra certificates and review key-generation practices.
- Banking & finance professional: Weak certificates can undermine trust in secure online banking and payments.
What it sets off
Who decided, why they say they did, and what it changes for people. Tap a card for the reasoning.
Green edge: good for those affected; red: bad; grey: mixed. Reported and Expert view steps come from a named source; Our reasoning steps are not stated anywhere and follow through the mechanism shown, so we are less sure of them. Bars show how sure we are, and that falls with every step. How we reason
Who is in it
Where this comes from
A level-1 summary of these reports, written in plain words. We have not checked it claim by claim; stories we research in full are marked level 2 to 5.
- [1]Explained | The Indian Express: Why Google, Mozilla, other browsers blocked eMudhra certificates over security lapse original ↗
- [2]mint - technology: Google, Apple and Mozilla block 8 eMudhra certificates over weak keys: What users need to know original ↗