eMudhra Indian Certificate Key Flaw and Google and Apple Block Eight Certificates

Security researcher known as Wayne discovered a flaw involving four-digit keys in certificates issued by Indian company eMudhra, and sent an email to Mozilla, Google, Apple and Microsoft on October 17, 2026. Google, Apple and Mozilla blocked eight of the company's certificates, as the weak keys could have allowed attackers to forge certificates for trusted websites.

AI-written summary of 2 sources; every verified point is backed by a verbatim quote. How Iyan works

• Security researcher Wayne found that eMudhra certificates rely on keys with only four digits.

  «اكتشف باحث أمني يُعرف باسم Wayne ثغرة تتعلق بمفاتيح من أربعة أرقام في شهادات شركة eMudhra الهندية»

  OfficeChai
• Browser companies blocked eight certificates issued by eMudhra after the flaw came to light.

  «حجبت جوجل وأبل وموزيلا ثماني شهادات من شركة eMudhra بعد ظهور ثغرة أمنية كبيرة»

  India Today
• Coverage described the keys as exceptionally weak, and said attackers could use them to forge certificates for trusted websites.

  «Their exceptionally weak keys could have enabled attackers to forge trusted website certificates.»

  India Today

Iyan — See it for yourself. What changed in your world today, why it matters, and how we know.
How it works • Privacy • Terms