> "There are a lot of questions here. As most of you can imagine, we have been subject to intense social media scrutiny and analysis by investors/customers over the last few days and it has made doing any meaningful analysis of the event pretty much impossible."

Mozilla Root Program's update, stating that eMudhra has not responded to investigatory questions within deadlines (and had provided an extension): https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c42

> "The Mozilla Root Program sent the attached questions to eMudhra on the 20th October at 20:31 UTC. eMudhra was asked to provide an initial response within 24 hours. After the deadline passed on October 21st, eMudhra asked for a further 24 hours to respond. As of the time of writing on Friday 23rd, Mozilla has not received a response to these questions."

eMudhra intermediate CA compromise

https://news.ycombinator.com/item?id=50166579

1271 points | galadran | 3 days ago | 504 comments

--

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

https://news.ycombinator.com/item?id=50177916

935 points | hkc | 2 days ago | 460 comments

--

eMudhra to exit global SSL/TLS certificate business

https://news.ycombinator.com/item?id=50195110

1111 points | bo0tzz | 1 day ago | 713 comments

> There are a lot of questions here. As most of you can imagine, we have been subject to intense social media scrutiny and analysis by investors/customers over the last few days and it has made doing any meaningful analysis of the event pretty much impossible. The event happened on April 30 2025 and was done by set of people who have worked in the PKI industry for several years and worked with us for a while. There is a lot of digging we need to do to understand the circumstances, why, what, how to share a meaningful report that can hopefully benefit the community. I do not know why some community members think we wont be getting back on this bug. When we signed up for the browser program trust, we also signed up for disclosure obligations to the community which we will uphold.

https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c39

ETA- HN rate-limiting won't let me reply, but to the commenter asking how all the pressure could delay a sober analysis:

I've never been involved with a mess like this, but I can well imagine it's difficult to convene the necessary people for a dispassionate RCA when your bosses are furious and investors are screaming for scapegoats to fire.