BengaluruAttackers could forge certificates for websites they do not control.
India’s national cybersecurity agency warned the compromised keys also enable impersonation and interception of encrypted traffic.
eMudhra said a flaw created weak keys alongside the strong originals, on 8 intermediate certificates, and its Indian signature business is unaffected.
The IT Ministry says the impact on Indian sites is very limited and accuses some accounts of fear-mongering.
The ministry has formed a special team to probe the incident.
How each outlet framed it
drawn from 100+ reports worldwide
- Economic Times leans critical
- centres the Indian government's response, noting the IT Ministry's claim that impact on Indian sites is 'very limited' and its warning about fear-mongering
Sources: Economic Times