X XFediYour place in the Fediverse
XFEDI

Conversation

ActivityPub
↳ In reply to a post

eMudhra to Exit global SSL/TLS Certificate Business

I wonder if demonstrating your unimaginable ineptitude to the world has consequences? 🤔

emudhra.comeMudhra to Exit global SSL/TLS Certificate BusinesseMudhra Limited (BSE: 543533 | NSE: EMUDHRA), a global digital trust company, today announced that its Board has decided to voluntarily withdraw from the global SSL/TLS certificate business.
↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 22, 2026 · 17:04 UTC

Replies
↳ In reply to a post

Just to test this out, I've tried a few things out with this compromised eMudhra cert. And in doing so, I realized that there were some differences between what accepts an eMudhra intermediate with a root in emSign Root TLS CA - G3 vs. one with a root in AAA Certificate Services. As such, I've added a drop-down to allow you to pick which one you want in tapioca.

For example, both RHEL (Rocky) 10.1 and Mint 22.3 allow (if you're not fully up to date to pick up this October fun) the G3 root, but not the AAA root.

Some of the physical devices I've tested:

  • Old Pixel 3 : ❌
  • Alfred Camera : ❌
  • Old Amazon Fire TV Stick: ✅

So, it's not a magic bullet. It seems that some systems didn't support eMudhra certs even before this month's fun. And supported systems that are getting updates will surely drop support for this cert if it had it before.

BUT, at least with this small sample set, I'd bet that this will open up the ability to see some traffic contents that were previously unavailable on some systems.

New tapioca GUI where "Use compromised cert" checkbox has an associated drop-down menu, where one can select "AAA" or "G3"mitmproxy showing HTTPS traffic from an Amazon Fire TV stick.
↩ Reply ♡ 0 · ↻ 0 ↗ Original