eMudhra to Exit Global SSL/TLS Certificate Business;

88•parimm•1h ago

Press Release titled “eMudhra to Exit global SSL/TLS Certificate Business; Will Sharpen Focus on Core Enterprise Solutions and trust services other than SSL/TLS”

https://www.bseindia.com/xml-data/corpfiling/AttachLive/82503e00-335c-49dc-b022-f4633a08b642.pdf

Comments

altbdoor•52m ago

There's a formal press release in here:

https://emudhra.com/en/press-release/emudhra-to-exit-global-...

solatic•51m ago

"will sharpen focus on... trust services other than SSL/TLS"

Is there some reputation left to salvage here that I'm not aware of? Who would trust them?

ahartmetz•37m ago

If they wanted to continue to make money, they could: exit the business, wait a bit, change the company name, and re-enter the business. Where "change the company name" could mean starting an actual new company, but with the same people, offices, contacts (OK, small problem there) and so on.

ygouzerh•25m ago

They will probably change their name soon

esafak•18m ago

The customers for certs are technical people capable of seeing past that, so let them change it every day if they want.

crote•4m ago

No, the customers for commercial certs are mid-level managers, who believe paying thousands of dollars for something you can also get for free means you are getting a higher quality - or in this case even believe it is "more secure". Rebranding will absolutely work for that, especially when you market your untrusted root as "ISO-certified private dedicated cloud-based PKI-as-a-Service".

The technical people will just install a certbot and use the default Let's Encrypt config.

NordStreamYacht•16m ago

Not so easy. They're a publicly traded company, the regulations are quite stringent.

giantrobot•7m ago

Facebo...I mean Meta did it to distance themselves from the Cambridge Analytica scandal (among others).

jerf•49m ago

"You can't fire me, I quit!"

gamegod•42m ago

This press release was brought to you by the number 4

49369201837•28m ago

That's numberwang!

ieie3366•40m ago

Related: the absolutely brutal question battery the Chrome team publicly submitted to eMudhra

https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c30

hmokiguess•8m ago

Why brutal? Reads very reasonable to me, nothing personal and nothing about someone or feelings everything about the entity and its obligations.

jesuswasjew•40m ago

CA Forum, Apple, Google and Mozilla are to be blamed for just giving license to random no security background far away company.

DetroitThrow•34m ago

Yes, not sure what the timeline was where trust was given to this company. Just horrible for the entire secure Internet. They've yet to answer many of the basic questions raised throughout this process too.

geodel•22m ago

Not to give into conspiracy theories but this company might be ideologically even if not materially aligned to current regime in India. With right kind of nudge any kind business contract is possible without any competency.

traceroute66•21m ago

Yes, its all very well someone here shouting about "the absolutely brutal question battery the Chrome team publicly submitted to eMudhra".

But in all honesty there are serious questions to be asked about:

a) The initial approval process for ANY CA

b) The ongoing monitoring process for ANY CA

The fact this CA was based in India ultimately has nothing to do with it if we are being completely honest here.

Clearly there is a fundamental problem with the overarching approval and monitoring process which means it could have happened anywhere. This time it just happened to be India.

Secondly, in direct reference to the "far away company" comment India does have quite strict controls on both certain technical things (speaking generally here, not specifically in relation to certs ... e.g. use of sat phones). And in general it is quite difficult (read: almost impossible) to turn up in India and do business as an external company. So there is probably a genuine need for an Indian company CA since not every body can/wants to use Let's Encrypt or whatever.

seatac76•37m ago

Terrible company, such evasive statements. Seems ripe for disruption.

Surely they should be investigated by the local regulator.

adithyareddy•11m ago

Yes, they are being investigated by the Ministry of Electronics and Information Technology.

https://www.deccanherald.com/india/meity-forms-team-to-probe...

notSavonarola•34m ago

I have four (4) takes on the matter.

vlfig•25m ago

There must be criminal matter here.

malfist•24m ago

I'm still waiting to read their post mortem with their ~~5~~ 4 Whys

AdvitXSingh•22m ago

yea sure, blame social media cause you are incompetent. nice

sambull•21m ago

I think this opens bigger questions on who and how people get access to these capabilities. After that recent cold wallet physical supply chain take over, what sort of people are able to get certs for anything they need?

paxy•17m ago

eMudhra is primarily used by the Indian government, so not hard to infer how they got into allowlists.

zulux•19m ago

" My new passphrase is "eMahidra4444". Now I have four-factor authentication.

mrlonglong•16m ago

Oh dear, never mind.

TheCondor•5m ago

“Oh you mean like PIN numbers?”

https://www.youtube.com/shorts/ZTqEHehcETo

Migrate Your 300-Node Redis Cluster to Just 3 Lavik Nodes

Let's Make Hiring Less of a Gamble

Recreate the Apollo Guidance Computer

Local network privacy is getting better

Tell your network to explain itself and then some

RL on mixed-precision, mixed-accelerator samplers

The Decline in the Transmission of Scientific Ideas [pdf]

Data structures and algorithms, explained with pictures

Jeffan-31B: A Gemma fine-tune ranked #1 on the Jev Decision Index

How to Setup and Use GitHub Secrets with Containers and Internet-Facing

Hacktrump.com Winning UCLA Math Contest – A Hoax?

Private capital–fueled economic growth might be knocking on India's doors soon

I built Live Coloring Book with AI agents after 15 years of coding by hand

Run full iOS 16.5 firmware on Android Devices

Show HN: cotex, an Elixir-based Cursor on Target router AKA a TAK server

Show HN: Kindred: Self-hosted personal CRM – contacts, interactions, reminders

Elasticity of Money in Production Networks

What 9,930 public agent skills tell your agent to do

Has the Investment Boom Expanded U.S. Productive Capacity?

Snowflake Horizon Context traces column lineage beyond Snowflake [video]

Show HN: Using an LLM chat template in reverse to play the user

Telecom networks are becoming distributed AI computing platforms

What's Getting Pwned

Parsing EDIFACT in Python with syntax trees

A majority of Americans have low-quality jobs

Show HN: The Daily Inference, a newspaper written and edited by AI agents

Abliteration – Removing LLM refusal behaviors via representation engineering

Show HN: Blastradius – find PHP2Shell, Node, emSign or leaked tokens

You could do it alone

California cities pull the plug on data centers