Uma empresa que atesta a segurança de sites tinha chaves secretas tão fracas que 8 delas foram quebradas

A significant security lapse has been uncovered at eMudhra, an Indian company responsible for issuing digital certificates that vouch for website authenticity and security. It has been revealed that eight of the company's secret keys were compromised, indicating a severe weakness in their security protocols. These keys are fundamental to the trust infrastructure of the internet, used to verify the identity of websites and secure communications. The compromise raises concerns about the integrity of digital certificates issued by eMudhra and potentially impacts the trust users place in websites secured by them. Major browser vendors and software manufacturers are reportedly working rapidly to implement patches and revoke compromised certificates to mitigate the risk to users worldwide. This incident highlights the critical importance of robust key management practices in cybersecurity.