Updated

Disgraced certificate authority eMudhra dropped out of the TLS business following a critical flaw in which a flubbed key signing ceremony allowed the minting of web credentials for any site, according to Ars Technica. The failure represents a fundamental breakdown in the security infrastructure that underpins HTTPS and secure web communications. The exit removes eMudhra from the list of trusted certificate authorities, reducing the number of providers in the already-concentrated market. The incident highlights the critical importance of proper key management practices in certificate authorities and the severe consequences of operational failures. eMudhra's exit demonstrates how even a single compromised certificate can threaten the security of the entire web ecosystem.