On Tuesday, we showed you the certificate authority whose intermediate private key was literally the number 4 — recoverable in four guesses, valid until 2040, chained to roots every major platform trusted. Today, eMudhra's board answered: the company is exiting the global SSL/TLS certificate business entirely . And in a twist nobody ordered, the same day brought a full bypass of the one-time-password login on their certificate portal . Five days from key compromise to market exit — this is what the trust industry looks like when all of its enforcement mechanisms fire at once.

This is act two of Tuesday's post . Act one was cryptography; act two is economics and reputation — and the economics were already written before the incident started.

What the board actually said

The press release (Oct 22) is a fascinating document, because it does three things at once:

It claims diligence. Chairman V.…