Major Tech Vendors Revoke Trust in eMudhra Certificates Following Key Compromise

Several major technology vendors, including Google, Mozilla, Apple, and the Go project, have revoked trust in certificates issued by the Indian Certificate Authority eMudhra following the exposure of eight compromised keys. The affected certificates were added to distrust lists across Chrome, Firefox, Safari, and the Go runtime ecosystems. The companies acted swiftly following disclosure, though the exact mechanism by which the keys were compromised has not been publicly identified or verified. The revocation prevents the compromised keys from being used for TLS impersonation or fraudulent code signing, mitigating the risk of man-in-the-middle attacks. No active exploitation has been confirmed, but the exposure of certificate authority keys represents a significant trust risk for the affected ecosystems.