eMudhra to exit global SSL/TLS certificate business(emudhra.com)
1136 points by bo0tzz 3 days ago | 737 comments
tl;dr: eMudhra is voluntarily exiting the global SSL/TLS certificate business following a recent incident that triggered disproportionate scrutiny relative to the segment's size (~1% of revenue). The company cited rising compliance costs, free SSL/TLS offerings from large players, and poor RoI as additional factors. Its G1 RSA roots will continue serving customers during the transition, and core offerings like DSC, eSign, enterprise PKI, and identity solutions remain unaffected.
HN Discussion:
  • ↓eMudhra is deflecting blame onto social media rather than taking real responsibility for the incident
  • ↓The incident reveals absurd incompetence that is hard to even analogize
  • ↓The 14-hour response time and framing of 'diligence' are inadequate for a CA breach
  • •Web PKI's reliance on a small set of trusted CAs is fundamentally broken
  • ↓The statement contains misleading or contradictory technical claims about affected CAs and infrastructure separation