Some of the world’s biggest Internet browser companies, including Google, Mozilla, Apple and Microsoft, have taken action to block digital certificates associated with Bengaluru-based eMudhra , after a serious security flaw was detected in the company’s systems for generating cryptographic keys. The flaw could have allowed attackers to impersonate legitimate websites and intercept supposedly secure Internet communications.
Google blocked the affected website-certification keys through an emergency update to Chrome last week, while Mozilla used its centralised certificate revocation system to block them in Firefox. These protections were deployed without requiring users to update or restart their browsers. Apple and Microsoft also subsequently took action against the affected certificates.
The incident has raised concerns about the broader security of the Internet, which relies on a system of trust between browsers and certification authorities to authenticate websites and secure online communications.…