BREAKING
18-yr-old Soumya wins gold at Asian Para GamesDasara 2026 brings box-office cheer for TollywoodKharge calls Modi’s rule ‘Hitler-like’, says people fed up with NDA govtNew ‘Vrushakarma’ poster creates curiosityStock markets extend losses on banking, financial shares sell-offGovt allows third-party agencies to conduct departmental inspectionsYash impresses with ‘Ravana Tandav’ from ‘Ramayana’Record 100-minute sellout: Jio Platforms IPO subscribed 3x timesMadhvacharya’s teachings advocated a caste-free, harmonious societyAadi Saikumar’s divine mystery thriller titled‘Aadi Rudrra’
Technology

Government constitutes special team to investigate security issue in eMudhra certificates

hellohimachalse@gmail.com 21 Oct 2026 9 hours ago

New Delhi: The Central government on Wednesday took special and serious note of the security incident concerning eMudhra’s Public Key Infrastructure (PKI), which was reported in the public domain. A special team has been formed by the Ministry of Electronics and Information Technology (Meity) to investigate the matter.

The incident under investigation was flagged by Mozilla. The company said that private keys linked to eight intermediate certificates issued under eMudhra’s public trust system were compromised, creating a risk that attackers could mint fraudulent HTTPS certificates.

The Union Ministry has clarified that the impact of this incident on Indian websites and apps was very limited. On the other hand, in the context of the panic spread on social media about its impact, the Centre has said that eMudhra’s digital signature certificate and eSign service are completely secure.

eMudhra basically provides 2 types of services

1. Issuance of Digital Signature Certificates and eSign services, regulated by the Controller of Certifying Authorities (CCA) under MeitY.

2. Issuance of digital certificates trusted by major browsers and operating systems, used to secure websites, software and online communications.

Both of these services are monitored by the Controller of Certification Authorities (CCA) under the Union Ministry of Information and Technology. The government said that the second function is international in nature and operates under a global trust framework. It is governed by international standards and subject to independent audits, including WebTrust audits conducted by BDO International Limited.

The Ministry clarified that the reported security incident pertains to this second function and Meity is not involved in its audit. It further said that the impact of this incident on Indian websites and applications have been very limited and for a very short interval.

The Ministry said that the government is now working with all stakeholders to resolve this matter at the earliest. In fact the CERT has already issued an advisory in relation to this incident and also the mitigation measures.

It said that further details would be shared following a thorough investigation in the matter. The Ministry reiterated that the Digital Signature Certificates and eSign services regulated by CCA, remained completely unaffected by this incident.

Related News