Chrome and Firefox Block eMudhra Certificates Over Fake-Site Risk

Google and Mozilla moved to block certificates tied to eight weak eMudhra Limited keys after a generation flaw made it possible to forge HTTPS credentials for websites, including crypto trading sites. The affected intermediate certificates sit between a trusted root certificate and certificates issued to individual websites. Their private keys were generated with too little randomness, allowing an attacker to create a certificate for a domain they do not control. To use one against a visitor, the attacker would also need to intercept that person's connection. Chrome deployed a block on Oct. 17.

Source: TokenPost