eMudhra security blunder left trusted CA signing keys exposed to anyone

T2Covered by 1 source · first reported by Help Net Security at 21 Oct, 14:11 UTC

Eight intermediate certificates issued by Indian certificate authority eMudhra were secured with private keys so weak that anyone could recover them from the public certificates in under a second. On its website, the company highlights that it has issued more than 60 million digital certificates. A…