↓ Skip to main content

“The impact of this incident on Indian websites and applications have been very limited and for a very short interval.”

Nemocaptnemo.in ↗

That is eMudhra talking. Eight of its intermediate CAs had private keys anyone could recover. Four days after the revocations, 156 government hosts still serve the dead certificates. A CA that lets its keys leak does not get to decide how limited the damage was.