Certification authority eMudhra defends its laughably weak private keys

eMudhra’s disclosure that weak private keys were published to browser trust stores highlights a high-severity trust and identity risk: organizations relying on its certificates may need to replace them quickly to avoid impersonation, service disruption, and potential fraud exposure. For CIOs and IT leaders, this is a reminder that PKI failures can create immediate operational overhead, third-party risk, and reputational damage even when direct revenue impact on the vendor appears limited. It also underscores the need to validate certificate supply-chain controls, incident response readiness, and fast rollback/reissuance processes for critical digital trust infrastructure.