> ## Content Index
> Fetch the complete content index at: https://adjacent.media/llms.txt
> Use this file to discover other available public pages before exploring further.

# Indian CA eMudhra's Compromised Keys Expose Web Infrastructure to Mass Impersonation
- URL: https://adjacent.media/signals/indian-ca-emudhras-compromised-keys-expose-web-infrastructure-to-mass-impersonation/
- Published: 2026-10-21T16:17:10.000Z
- Updated: 2026-10-21T16:17:10.000Z
- Description: eMudhra, one of India’s major certificate authorities trusted by browsers to validate website identity, had multiple private keys stolen—including one with the password “4”—enabling attackers to forge SSL certificates for any domain and impersonate banks, government services, and enterprises at scal
- Author: Jonathan Greene
- Tags: #signal, theme-connected, cybersecurity, infrastructure, digital trust

Source: [The Register: Biting the hand that feeds](https://www.theregister.com/security/2026/10/20/indian-certification-authority-emudhras-private-keys-compromised-one-of-them-was-the-number-4/5304312?ref=adjacent.media)

eMudhra, one of India's major certificate authorities trusted by browsers to validate website identity, had multiple private keys stolen—including one with the password "4"—enabling attackers to forge SSL certificates for any domain and impersonate banks, government services, and enterprises at scale. The breach is structural, not localized: it compromises India's PKI layer and forces a continent-wide cleanup of trusted certificate stores. It also exposes the gap between regulatory certification requirements and actual operational security practices in emerging markets. Certificate pinning and transparency logs matter here: eMudhra's compromise could have silently poisoned traffic for months without detection had browsers not developed these secondary verification mechanisms.